PT-2023-27606 · Opto 22 · Snap Pac S1 Firmware

Nicolas Cano · Published 2023-08-24 · Updated 2024-09-11 · CVE-2023-40708

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SNAP PAC S1 Firmware version R10.3b

Description The File Transfer Protocol (FTP) port is open by default, which could allow an adversary to access some device files.

Recommendations For SNAP PAC S1 Firmware version R10.3b, consider disabling the FTP port as a temporary workaround until a patch is available. Restrict access to the device files to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2023-40708

Affected Products

Snap Pac S1 Firmware

References · 5

• https://osv.dev/vulnerability/CVE-2023-40708 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40708 · Security Note
• https://t.me/cibsecurity/69128 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-236-02 · Note
• https://t.me/cvenotify/57191 · Telegram Post