CVE-2024-41793: High severity siemens sentron 7kt pac1260 data manager vulnerability
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41793?
CVE-2024-41793 is considered a high severity vulnerability due to the potential for unauthenticated remote access.
How do I fix CVE-2024-41793?
To mitigate CVE-2024-41793, disable the SSH service in the web interface of the SENTRON 7KT PAC1260 Data Manager.
What devices are affected by CVE-2024-41793?
CVE-2024-41793 affects all versions of the SENTRON 7KT PAC1260 Data Manager.
Can CVE-2024-41793 be exploited remotely?
Yes, CVE-2024-41793 can be exploited by unauthenticated remote attackers to enable SSH access.
What kind of attack is possible with CVE-2024-41793?
CVE-2024-41793 allows attackers to enable the SSH service, potentially leading to unauthorized remote control of the device.