CVE-2024-41796mediumCWE-620

CVE-2024-41796: falha de média gravidade em Siemens SENTRON 7KT PAC1260 Data Manager

Publicada em

Seguir esta CVE+ Monitorar SENTRON 7KT PAC1260 Data Manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.4%
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing the current password. In combination with a prepared CSRF attack (CVE-2024-41795) an unauthenticated attacker could be able to set the password to an attacker-controlled value.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Siemens · SENTRON 7KT PAC1260 Data Manager
CVEs relacionadas — Siemens SENTRON 7KT PAC1260 Data Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2024-41790CRITICALCVE-2024-41790EPSS 0.9%CVE-2024-41789CRITICALCVE-2024-41789EPSS 0.9%CVE-2024-41788CRITICALCVE-2024-41788EPSS 0.9%CVE-2024-41794CRITICALCVE-2024-41794EPSS 0.6%CVE-2024-41792CRITICALCVE-2024-41792EPSS 0.6%CVE-2024-41793HIGHCVE-2024-41793EPSS 0.6%