Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vw2p-h22j-gvgq

Опубликовано: 08 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 7.3

Описание

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the date and time.

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the date and time.

EPSS

Процентиль: 37%
0.00163
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.3
nvd
10 месяцев назад

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the date and time.

CVSS3: 7.3
fstec
10 месяцев назад

Уязвимость компонента Data Manager микропрограммного обеспечения многофункциональных приборов измерения параметров электрических сетей Siemens SENTRON 7KT PAC1260, позволяющая нарушителю получить доступ на чтение, изменение и удаление данных

EPSS

Процентиль: 37%
0.00163
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-306