Lucene search

K
nvd[email protected]NVD:CVE-2023-40710
HistoryAug 24, 2023 - 5:15 p.m.

CVE-2023-40710

2023-08-2417:15:09
CWE-400
web.nvd.nist.gov
adversary
device restart
http requests
controller
web server
snap pac s1 firmware
r10.3b

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for theΒ SNAP PAC S1 Firmware version R10.3b

Affected configurations

NVD
Node
opto22snap_pac_s1_firmwareMatchr10.3b
AND
opto22snap_pac_s1Match-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for NVD:CVE-2023-40710