CVE-2024-41795

Summary

CVE-2024-41795 is a newly identified vulnerability affecting all versions of the SENTRON 7KT PAC1260 Data Manager. This issue permits Cross-Site Request Forgery (CSRF) attacks on the device's web interface. An attacker, who is not authenticated, can manipulate legitimate administrators into clicking on malicious links, leading to unauthorized alteration of device settings. Such actions could result in significant operational disruptions or security risks. It is crucial for organizations using these devices to apply updates or patches as soon as they become available to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.