CVE-2024-41792

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could allow an unauthenticated attacker it to access arbitrary files on the device with root privileges.

Score

CVSS 4.0 9.2 Critical

Status

Analyzed - productcert@siemens.com

Published

2025-04-08

Last modified

2025-04-08

Weaknesses

CWE-22

Affected products

• 7kt Pac1260 Data Manager Firmware (Siemens)
• Sentron 7kt Pac1260 Data Manager (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-187636.html