CVE-2024-41794: Critical severity sentron 7kt pac1260 data manager vulnerability
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if the ssh service is enabled (e.g., by exploitation of CVE-2024-41793).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41794?
CVE-2024-41794 has been classified as a high severity vulnerability due to the potential for unauthenticated remote access with root privileges.
How do I fix CVE-2024-41794?
To fix CVE-2024-41794, it's recommended to update the SENTRON 7KT PAC1260 Data Manager to a secure version or apply available security patches as they are released.
What type of devices are affected by CVE-2024-41794?
CVE-2024-41794 affects all versions of the Siemens SENTRON 7KT PAC1260 Data Manager.
Can CVE-2024-41794 be exploited remotely?
Yes, CVE-2024-41794 can be exploited remotely due to hardcoded credentials allowing unauthorized access.
What are the potential consequences of CVE-2024-41794?
The potential consequences of CVE-2024-41794 include complete unauthorized control over the affected device, leading to data breaches or service disruptions.