CVE-2024-22044: Siemens Sentron 3kc ACT6

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affected devices expose an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet. This could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot.

Affected products

• Siemens Sentron 3kc ACT6: any version
• Siemens Sentron 3kc ATC6 Expansion Module Ethernet: any version

Published 2024-03-12. Last modified 2026-06-17.