PT-2025-15391 · Unknown · Senron 7Kt Pac1260 Data Manager

Published 2025-04-08 · Updated 2025-04-08 · CVE-2024-41793

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: SENRON 7KT PAC1260 Data Manager (All versions)

Description: A vulnerability has been identified that allows an unauthenticated remote attacker to enable remote access to the device via ssh. The web interface of affected devices provides an endpoint that allows the ssh service to be enabled without authentication.

Recommendations: For all versions, consider disabling the ssh service until a patch is available to prevent unauthorized access. As a temporary workaround, restrict access to the web interface to minimize the risk of exploitation. Avoid using the endpoint that enables the ssh service without proper authentication mechanisms in place. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-04629

CVE-2024-41793

Affected Products

Senron 7Kt Pac1260 Data Manager

References · 5

• https://cert-portal.siemens.com/productcert/html/ssa-187636.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04629 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41793 · Security Note
• https://twitter.com/CVEnew/status/1909528267046240749 · Twitter Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-187636.pdf · Note