Remote Access Vulnerability in SENTRON 7KT PAC1260 Data Manager by Siemens

CVE-2024-41793

Summary

A significant vulnerability has been identified in the SENTRON 7KT PAC1260 Data Manager, affecting all versions. The device's web interface provides an endpoint that allows the enabling of the SSH service without requiring user authentication. This presents an opportunity for unauthenticated remote attackers to gain unauthorized access to the device via SSH, potentially compromising the entire system's security. Immediate attention and remediation are necessary to protect against such unauthorized access.

References