https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:34:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-191779 EUVD-2026-191779 https://cve.radiocsirt.org/vuln/euvd-2026-191779 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40708 <p>The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.</p> <p>The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40708 https://cve.radiocsirt.org/vuln/ghsa-g4pv-ghw3-xqxj <p>The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.</p> <p>The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.</p> https://cve.radiocsirt.org/vuln/ghsa-g4pv-ghw3-xqxj https://cve.radiocsirt.org/vuln/gsd-2023-40708 gsd-2023-40708 https://cve.radiocsirt.org/vuln/gsd-2023-40708 https://cve.radiocsirt.org/vuln/icsa-23-236-02 <p>There is no limit on the number of login attempts. This could allow a brute force attack on the built-in web server login. There are no requirements for setting a complex password, which could allow a successful brute force attack if users don&#39;t setup complex credentials. The File Transfer Protocol (FTP) port is open by default. This could allow an adversary to access some device files. An adversary could crash the entire device by sending large quantity of ICMP requests if the controller has the built-in web server enabled but not completely set-up and configured. An adversary could cause a continuous restart loop to the entire device by sending large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set-up and configured.</p> <p>There is no limit on the number of login attempts. This could allow a brute force attack on the built-in web server login. There are no requirements for setting a complex password, which could allow a successful brute force attack if users don&#39;t setup complex credentials. The File Transfer Protocol (FTP) port is open by default. This could allow an adversary to access some device files. An adversary could crash the entire device by sending large quantity of ICMP requests if the controller has the built-in web server enabled but not completely set-up and configured. An adversary could cause a continuous restart loop to the entire device by sending large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set-up and configured.</p> https://cve.radiocsirt.org/vuln/icsa-23-236-02