CVE-2023-40707

Name of the Vulnerable Software and Affected Versions SNAP PAC S1 Firmware version R10.3b

Description The built-in web server of the SNAP PAC S1 Firmware does not require complex passwords, which could allow for a successful brute force attack if users do not set up complex credentials.

Recommendations For SNAP PAC S1 Firmware version R10.3b, consider setting up complex credentials to prevent brute force attacks. As a temporary workaround, restrict access to the built-in web server until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.