Vulnerability Intelligence Report
CVE-2024-41793
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.
No Active Exploit Signals
CVSS Base Score
8.6
HIGH
Exploitability:3.9
Impact Score:4.0
EPSS Probability:0.47%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-306 ↗CWE-306: Missing Authentication for Critical Function
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Siemens | SENTRON 7KT PAC1260 Data Manager | 0 < * (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.475%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Siemens · Vendor · Germany |
| Reserved | 2024-07-22T13:19:53 |
| Published | 2025-04-08T08:22:09 |
| Last Updated | 2025-04-08T13:39:41 |
Community Chatter & Buzz