Known Vulnerabilities for products from Opto22
Listed below are 13 of the newest known vulnerabilities associated with the vendor "Opto22".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-40710 json | An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if t... | 7.5 - HIGH | 2023-08-24 | 2023-08-30 |
| CVE-2023-40709 json | An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in we... | 7.5 - HIGH | 2023-08-24 | 2023-08-29 |
| CVE-2023-40708 json | The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adve... | 5.3 - MEDIUM | 2023-08-24 | 2023-08-29 |
| CVE-2023-40707 json | There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3... | 7.5 - HIGH | 2023-08-24 | 2023-08-29 |
| CVE-2023-40706 json | There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could a... | 9.8 - CRITICAL | 2023-08-24 | 2023-08-29 |
| CVE-2020-12046 json | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware update... | 5.7 - MEDIUM | 2020-05-14 | 2020-05-18 |
| CVE-2020-12042 json | Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are n... | 6.5 - MEDIUM | 2020-05-14 | 2020-05-18 |
| CVE-2020-10620 json | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacke... | 9.8 - CRITICAL | 2020-05-14 | 2020-05-18 |
| CVE-2020-10616 json | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, ... | 8.8 - HIGH | 2020-05-14 | 2020-05-18 |
| CVE-2020-10612 json | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However... | 9.1 - CRITICAL | 2020-05-14 | 2020-05-18 |
| CVE-2018-14807 json | A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and pri... | 9.8 - CRITICAL | 2018-10-18 | 2021-04-26 |
| CVE-2015-1007 json | A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, whi... | 7.8 - HIGH | 2019-03-25 | 2019-10-09 |
| CVE-2015-1006 json | A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006,... | 9.8 - CRITICAL | 2019-05-10 | 2019-10-09 |
Known software with vulnerabilities from Opto22
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Opto22 | Optodatalink | r10.2c |
| Application | Opto22 | Optoopcserver | r10.2c |
| Application | Opto22 | Pac Display | r10.2b |
| Application | Opto22 | Pac Project | r9.4006 |
| Application | Opto22 | Softpac Project | - |