DeutschShown in its original language — a full translation is planned for a future version.
Siemens SENTRON 7KT PAC1260 Data Manager: Mehrere Schwachstellen
view advisory published 2025-04-08
Ein Angreifer kann mehrere Schwachstellen in Siemens Sentron PAC ausnutzen, um beliebigen Code mit administrativen Rechten auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, erhöhte Rechte zu erlangen und vertrauliche Informationen preiszugeben.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41796US | — | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing th… | ||||
| CVE-2024-41795US | — | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices is vulnerable to Cross-Site Request Forgery (CSRF) att… | ||||
| CVE-2024-41794US | critical9.8OT elevated | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating sys… | ||||
| CVE-2024-41793US | high7.5OT elevated | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh ser… | ||||
| CVE-2024-41792US | high7.5 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could al… | ||||
| CVE-2024-41791US | medium6.5OT elevated | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This c… | ||||
| CVE-2024-41790US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the region parameter in specific POS… | ||||
| CVE-2024-41789US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific P… | ||||
| CVE-2024-41788US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the input parameters in specific GET… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan