CVE-2024-41792: Siemens 7kt PAC1260 Data Manager Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could allow an unauthenticated attacker it to access arbitrary files on the device with root privileges.

Affected products

• Siemens 7kt PAC1260 Data Manager Firmware: any version

Published 2025-04-08. Last modified 2026-06-17.