Vulnerability Intelligence Report
CVE-2024-41794
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if the ssh service is enabled (e.g., by exploitation of CVE-2024-41793).
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
Exploitability:3.9
Impact Score:6.1
EPSS Probability:0.54%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-798 ↗CWE-798: Use of Hard-coded Credentials
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Siemens | SENTRON 7KT PAC1260 Data Manager | 0 < * (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.541%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Siemens · Vendor · Germany |
| Reserved | 2024-07-22T13:19:53 |
| Published | 2025-04-08T08:22:11 |
| Last Updated | 2025-04-08T13:37:54 |
Community Chatter & Buzz