PT-2024-7770 · Siemens · Siemens Sentron 7Km Pac3200

Benedikt Kühne

+1

·

Published

2024-10-08

·

Updated

2024-10-13

·

CVE-2024-41798

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Siemens SENTRON 7KM PAC3200 (All versions)
Description A vulnerability has been identified in the Modbus TCP interface of the Siemens SENTRON 7KM PAC3200, where affected devices only provide a 4-digit PIN to protect from administrative access. This insufficient protection allows attackers with access to the Modbus TCP interface to bypass it by brute-force attacks or by sniffing the Modbus clear text communication. The issue is related to improper authentication, specifically the use of a weak 4-digit PIN and the lack of encryption in the Modbus protocol.
Recommendations As a temporary workaround, consider disabling access to the Modbus TCP interface until a patch is available. Restrict access to the administrative functions to minimize the risk of exploitation. Avoid using the 4-digit PIN for protection until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2024-09263
CVE-2024-41798

Affected Products

Siemens Sentron 7Km Pac3200