CVE-2024-41790

9.4 criticalEPSS 0.9%

Critical (9.4) in siemens 7kt pac1260 data manager firmware. EPSS 0.9% chance of exploitation in the next 30 days.

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the region parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.

Severity

CVSS 4.0

9.4 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2025-04-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:7kt_pac1260_data_manager_firmware

References

https://cert-portal.siemens.com/productcert/html/ssa-187636.html

Check your stack JSON