Siemens 7kt PAC1260 Data Manager Firmware vulnerabilities

9 CVEs affecting Siemens 7kt PAC1260 Data Manager Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-41796, published 2025-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-41790, published 2025-04-08. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the region parameter in specific POST requests. This…
CVE-2024-41789, published 2025-04-08. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This…
CVE-2024-41788, published 2025-04-08. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the input parameters in specific GET requests. This…
CVE-2024-41794, published 2025-04-08. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root…
CVE-2024-41792, published 2025-04-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could allow an…
CVE-2024-41793, published 2025-04-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without…
CVE-2024-41791, published 2025-04-08. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This could allow an…
CVE-2024-41796, published 2025-04-08. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing the current password.…
CVE-2024-41795, published 2025-04-08. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could…