CVE Catalog
CVE-2023-40709
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk0.44%
35th percentile - higher than 35% of all known CVEs
Summary
An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but is not fully configured for SNAP PAC S1 Firmware version R10.3b.
Risk Assessment
The risk to the organization is the potential for complete device failure, which could lead to system downtime.
Recommendation
It is recommended to fully configure the built-in web server or disable it to minimize the risk of failure.
Original NVD description (English source)
An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b