CVE-2024-41793
HIGHSENTRON 7KT PAC1260 Data Manager - Unauthenticated SSH Service Enablement via Web Interface
Title source: llmDescription
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.
References (1)
Core 1
Core References
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-187636.html
Scores
CVSS v3
8.6
EPSS
0.0023
EPSS Percentile
46.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-306
Status
published
Products (1)
siemens/7kt_pac1260_data_manager_firmware
Published
Apr 08, 2025
Tracked Since
Feb 18, 2026