Missing Authentication for Critical Function in SENTRON 7KT PAC1260 Data Manager - CVE-2024-41791
Published: April 15, 2025
Vulnerability identifier: #VU107457
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-41791
CWE-ID: CWE-306
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to the affected application does not authenticate report creation requests. A remote attacker can read or clear the log files on the device, reset the device or set the date and time.
Affected software
SENTRON 7KT PAC1260 Data Manager
How to mitigate CVE-2024-41791
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.