7Kt Pac1260 Data Manager
Approved changes feed: RSS · Atom
cpe:2.3:h:siemens:7kt_pac1260_data_manager:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | 7Kt Pac1260 Data Manager (56f198e0-eaf7-5c32-bee6-ee7ef739b35c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41796 |
not_vulnerable | 2026-06-08 06:43:55.219734 |
Details available
MEDIUM (6.5)
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing the current password. In combination with a prepared CSRF attack (CVE-2024-41795) an unauthenticated attacker could be able to set the password to an attacker-controlled value.
Published: 2025-04-08T08:22:14.357Z
Updated: 2025-04-08T13:31:32.350Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41795 |
not_vulnerable | 2026-06-08 06:43:55.219233 |
Details available
MEDIUM (6.5)
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could allow an unauthenticated attacker to change arbitrary device settings by tricking a legitimate device administrator to click on a malicious link.
Published: 2025-04-08T08:22:12.685Z
Updated: 2025-04-08T13:37:07.939Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41794 |
not_vulnerable | 2026-06-08 06:43:55.218820 |
Details available
CRITICAL (10)
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if the ssh service is enabled (e.g., by exploitation of CVE-2024-41793).
Published: 2025-04-08T08:22:11.279Z
Updated: 2025-04-08T13:37:54.608Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41793 |
not_vulnerable | 2026-06-08 06:43:55.218376 |
Details available
HIGH (8.6)
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.
Published: 2025-04-08T08:22:09.907Z
Updated: 2025-04-08T13:39:41.981Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41792 |
not_vulnerable | 2026-06-08 06:43:55.218052 |
Details available
HIGH (8.6)
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could allow an unauthenticated attacker it to access arbitrary files on the device with root privileges.
Published: 2025-04-08T08:22:08.546Z
Updated: 2025-04-08T13:17:38.462Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41791 |
not_vulnerable | 2026-06-08 06:43:55.217558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41790 |
not_vulnerable | 2026-06-08 06:43:55.217031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41789 |
not_vulnerable | 2026-06-08 06:43:55.216595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41788 |
not_vulnerable | 2026-06-08 06:43:55.215933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.