DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Siemens SENTRON 7KT PAC1260 Data Manager: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-04-08
Ein Angreifer kann mehrere Schwachstellen in Siemens Sentron PAC ausnutzen, um beliebigen Code mit administrativen Rechten auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, erhöhte Rechte zu erlangen und vertrauliche Informationen preiszugeben.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41796US | — | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing th… | ||||
| CVE-2024-41795US | — | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices is vulnerable to Cross-Site Request Forgery (CSRF) att… | ||||
| CVE-2024-41794US | critical9.8OT erhöht | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating sys… | ||||
| CVE-2024-41793US | high7.5OT erhöht | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh ser… | ||||
| CVE-2024-41792US | high7.5 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could al… | ||||
| CVE-2024-41791US | medium6.5OT erhöht | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This c… | ||||
| CVE-2024-41790US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the region parameter in specific POS… | ||||
| CVE-2024-41789US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific P… | ||||
| CVE-2024-41788US | high7.2 | — | ||
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the input parameters in specific GET… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan