Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6f6r-xp9p-x965

Опубликовано: 08 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.7
CVSS3: 8.6

Описание

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.

EPSS

Процентиль: 30%
0.00113
Низкий

7.7 High

CVSS4

8.6 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 8.6
nvd
10 месяцев назад

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.

CVSS3: 8.6
fstec
10 месяцев назад

Уязвимость компонента Data Manager микропрограммного обеспечения многофункциональных приборов измерения параметров электрических сетей Siemens SENTRON 7KT PAC1260, позволяющая нарушителю получить несанкционированный доступ к устройству

EPSS

Процентиль: 30%
0.00113
Низкий

7.7 High

CVSS4

8.6 High

CVSS3

Дефекты

CWE-306