CVE-2023-40707 Information

Description

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b which could allow for a successful brute force attack if users don’t set up complex credentials.

Reference

https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02