CVE-2023-40706 — Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server

CVE-2023-40706

Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server PUBLISHED

Description (CNA)

There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login.

Affected (CNA)

Vendor / product	Versions
OPTO 22 / SNAP PAC S1	affected R10.3b

CWE

CWE-307

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02

CISA-ADP

No English description supplied.

No references supplied.