VYPR
Vendor

SNAP PAC

Products
2
CVEs
4
Across products
4
Status
Private

Products

2

Recent CVEs

4
  • CVE-2023-40707HigAug 24, 2023
    risk 0.56cvss 8.6epss 0.00

    There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.

  • CVE-2023-40710MedAug 24, 2023
    risk 0.44cvss 6.8epss 0.00

    An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware…

  • CVE-2023-40709MedAug 24, 2023
    risk 0.44cvss 6.8epss 0.00

    An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b

  • CVE-2023-40708MedAug 24, 2023
    risk 0.38cvss 5.8epss 0.00

    The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.