CVE-2024-41793

7.7 highEPSS 0.6%

High (7.7) in siemens 7kt pac1260 data manager firmware. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.

Severity

CVSS 4.0

7.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-04-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:7kt_pac1260_data_manager_firmware

References

https://cert-portal.siemens.com/productcert/html/ssa-187636.html

Check your stack JSON