PT-2025-15389 · Unknown · Senron 7Kt Pac1260 Data Manager

Published 2025-04-08 · Updated 2025-04-08 · CVE-2024-41791

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SENRON 7KT PAC1260 Data Manager (all versions)

Description: A security issue has been identified where the web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device, or set the date and time.

Recommendations: For all versions, consider disabling the web interface until a patch is available to prevent unauthorized access. Restrict access to the device's configuration settings to minimize the risk of exploitation. Avoid using the device's web interface for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-04627

CVE-2024-41791

Affected Products

Senron 7Kt Pac1260 Data Manager

References · 5

• https://cert-portal.siemens.com/productcert/html/ssa-187636.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04627 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41791 · Security Note
• https://twitter.com/CVEnew/status/1909528272683385322 · Twitter Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-187636.pdf · Note