Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4wq-mmwq-2c74

Опубликовано: 08 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 10
CVSS3: 10

Описание

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if the ssh service is enabled (e.g., by exploitation of CVE-2024-41793).

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if the ssh service is enabled (e.g., by exploitation of CVE-2024-41793).

EPSS

Процентиль: 53%
0.003
Низкий

10 Critical

CVSS4

10 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 10
nvd
10 месяцев назад

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if the ssh service is enabled (e.g., by exploitation of CVE-2024-41793).

CVSS3: 10
fstec
10 месяцев назад

Уязвимость компонента Data Manager микропрограммного обеспечения многофункциональных приборов измерения параметров электрических сетей Siemens SENTRON 7KT PAC1260, позволяющая нарушителю получить несанкционированный доступ к устройству

EPSS

Процентиль: 53%
0.003
Низкий

10 Critical

CVSS4

10 Critical

CVSS3

Дефекты

CWE-798