CVE-2024-41791

Summary

CVE-2024-41791 is a newly disclosed vulnerability affecting all versions of SENTRON 7KT PAC1260 Data Manager. This issue lies in the web interface of the device, which fails to authenticate report creation requests. Consequently, an unauthenticated attacker can remotely gain access to the log files, clear them, or even reset the device, posing a significant security risk. Moreover, the attacker can manipulate the date and time settings, potentially disrupting critical system functionalities. Organizations using these devices are strongly encouraged to update to the latest, patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.