CVE-2023-40710
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but is not fully configured for SNAP PAC S1 Firmware version R10.3b.
Risk Assessment
The risk to the organization is that the device may become unavailable due to continuous restarts, potentially leading to service interruptions.
Recommendation
It is recommended to configure the built-in web server on the controller or disable it to prevent potential attacks.
Original NVD description (English source)
An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b