CVE-2023-40706

Summary

CVE-2023-40706 refers to a vulnerability in the SNAP PAC S1 Firmware version R10.3b's built-in web server. This issue is significant because it allows for an unlimited number of login attempts. An attacker could exploit this vulnerability through a brute-force attack, increasing the chances of gaining unauthorized access to the system. The lack of a limit on login attempts poses a serious security risk and should be addressed promptly by updating to a newer firmware version that includes this security enhancement.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.