A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.
References
Configurations
No configuration.
History
08 Apr 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-08 09:15
Updated : 2025-04-08 09:15
NVD link : CVE-2024-41793
Mitre link : CVE-2024-41793
JSON object : View
Products Affected
No product.
CWE
CWE-306
Missing Authentication for Critical Function