PT-2025-15392 · Senron · Senron 7Kt Pac1260 Data Manager

Published 2025-04-08 · Updated 2025-04-08 · CVE-2024-41794

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SENRON 7KT PAC1260 Data Manager (affected versions not specified)

Description: A vulnerability has been identified where affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device if they possess these credentials and the SSH service is enabled.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2025-04081

CVE-2024-41794

Affected Products

Senron 7Kt Pac1260 Data Manager

References · 7

• https://cert-portal.siemens.com/productcert/html/ssa-187636.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04081 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41794 · Security Note
• https://twitter.com/CveFindCom/status/1909524926941327459 · Twitter Post
• https://twitter.com/cybercronai/status/1909599770777203133 · Twitter Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-187636.pdf · Note
• https://twitter.com/CVEnew/status/1909528266102509757 · Twitter Post