CVE-2024-41791

HIGH

SENTRON 7KT PAC1260 Data Manager - Unauthenticated Critical Function Access via Web Interface

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the date and time.

References (1)

Core 1

Scores

CVSS v3 7.3
EPSS 0.0016
EPSS Percentile 36.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-306
Status published
Products (1)
siemens/7kt_pac1260_data_manager_firmware
Published Apr 08, 2025
Tracked Since Feb 18, 2026