CVE-2024-41796: CSRF
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing the current password. In combination with a prepared CSRF attack (CVE-2024-41795) an unauthenticated attacker could be able to set the password to an attacker-controlled value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41796?
CVE-2024-41796 is considered a critical vulnerability as it allows unauthorized password changes in the web interface of affected devices.
How do I fix CVE-2024-41796?
To remediate CVE-2024-41796, users should update their SENTRON 7KT PAC1260 Data Manager to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-41796?
All versions of the SENTRON 7KT PAC1260 Data Manager are affected by CVE-2024-41796, making all users vulnerable.
What can an attacker do with CVE-2024-41796?
An attacker can exploit CVE-2024-41796 to change the device's login password without knowing the current password, especially when used in conjunction with a CSRF attack.
Is there a public exploit for CVE-2024-41796?
While specific exploit codes for CVE-2024-41796 may not be publicly available, the vulnerability's nature poses a significant risk to impacted devices.