Siemens SENTRON 7KT PAC1261 Data Manager
Advisory ansehen veröffentlicht 2026-05-12
The web server in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 contains a request smuggling vulnerability in the Go Project's net/http package that could allow an attacker to retrieve authorization tokens that can be used to gain administrative control over the device. Siemens has released a new version for SENTRON 7KT PAC1261 Data Manager and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-22871US | — | — | ||
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjuncti… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-783943: HTTP Request Smuggling Vulnerability in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 - CSAF Versionself
- SSA-783943: HTTP Request Smuggling Vulnerability in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 - HTML Versionself
- ICS Advisory ICSA-26-134-14 JSONself
- ICS Advisory ICSA-26-134-14 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSENTRON 7KT PAC1261 Data Manager
Use encrypted protocols
- BehobenSENTRON 7KT PAC1261 Data Manager
Update to V2.1.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977717/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan