Siemens SENTRON 7KT PAC1260 Data Manager
SENTRON 7KT PAC1260 Data Manager is affected by multiple vulnerabilities as listed below. Software fixes can no longer be provided for The SENTRON 7KT PAC1260 Data Manager. This advisory documents the known open vulnerabilities. To fix the vulnerabilities, Siemens recommends to replace the device by the new SENTRON 7KT PAC1261 Data Manager and update it to the latest available firmware version.
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41796US | — | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing th… | ||||
| CVE-2024-41795US | — | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices is vulnerable to Cross-Site Request Forgery (CSRF) att… | ||||
| CVE-2024-41794US | critical9.8OT elevated | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating sys… | ||||
| CVE-2024-41793US | high7.5OT elevated | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh ser… | ||||
| CVE-2024-41792US | high7.5 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could al… | ||||
| CVE-2024-41791US | medium6.5OT elevated | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This c… | ||||
| CVE-2024-41790US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the region parameter in specific POS… | ||||
| CVE-2024-41789US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific P… | ||||
| CVE-2024-41788US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the input parameters in specific GET… | ||||
references
External citations — patches, advisories, analysis.
- SSA-187636: Multiple Vulnerabilities in SENTRON 7KT PAC1260 Data Manager - CSAF Versionself
- SSA-187636: Multiple Vulnerabilities in SENTRON 7KT PAC1260 Data Manager - HTML Versionself
- ICS Advisory ICSA-25-100-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-100-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (11)
- MitigationSENTRON 7KT PAC1260 Data Manager
Do not access links from untrusted sources while logged in at affected devices
- MitigationSENTRON 7KT PAC1260 Data Manager
Do not access links from untrusted sources while logged in at affected devices
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
- No fix plannedSENTRON 7KT PAC1260 Data Manager
Currently no fix is planned
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan