CVE-2024-41796
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 8, 2025
CWE ID 620
Summary
CVE-2024-41796: A serious vulnerability has been discovered in the SENTRON 7KT PAC1260 Data Manager, affecting all versions. The web interface of the device is vulnerable to password changes without requiring the current password. An attacker can exploit this weakness in conjunction with a Cross-Site Request Forgery (CSRF) attack (CVE-2024-41795) to set the password to a malicious value, allowing unauthenticated access to the device.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.