Path Traversal Vulnerability in SENTRON 7KT PAC1260 Data Manager by Siemens

CVE-2024-41792

Summary

A path traversal vulnerability exists in the web interface of the SENTRON 7KT PAC1260 Data Manager, allowing unauthenticated attackers to gain access to arbitrary files with root privileges. This serious security flaw can lead to unauthorized data exposure and potential compromise of device integrity. Users of this device should take immediate action to secure their systems against possible exploitation by applying the necessary patches or workarounds.

References