CVE-2024-41788

Summary

CVE-2024-41788 is a newly identified vulnerability affecting all versions of the SENTRON 7KT PAC1260 Data Manager web interface. The issue lies in the lack of input sanitization for certain GET requests. An authenticated attacker can exploit this vulnerability to execute arbitrary code with root privileges. This poses a significant risk to the affected devices, as unauthorized code execution can lead to serious security implications and potential data breaches. Organizations using SENTRON 7KT PAC1260 Data Managers are urged to apply the forthcoming patch to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.