CVE-2024-41789 - A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions) · CoreCVE

Back Back to CVE browser

CRITICAL

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions)

Published Apr 8, 2025

9.4

CRITICAL

CVSS 4.0

EPSS 0.89%

Description

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.

Affected products

Vendor Siemens Product SENTRON 7KT PAC1260 Data Manager Default
unknown
Affected
- 0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Siemens	SENTRON 7KT PAC1260 Data Manager	unknown	Affected 0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

https://cert-portal.siemens.com/productcert/html/ssa-187636.html
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10348
Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-187636.html		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10348		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Apr 8, 2025

Updated Apr 8, 2025

Reserved Jul 22, 2024

Link CVE-2024-41789

CISA Vulnrichment

Updated Apr 8, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-41789

Red Hat

No data

ENISA EUVD

Assigner siemens

Published Apr 8, 2025

Updated Apr 8, 2025

Link EUVD-2025-10348

GitHub

No data