CVE-2024-41798

Summary

CVE-2024-41798 is a newly discovered vulnerability affecting all versions of SENTRON 7KM PAC3200. The weakness lies in the device's security mechanism, which only requires a 4-digit PIN for administrative access via the Modbus TCP interface. This shortcoming makes the system susceptible to brute-force attacks and potential data interception through clear text communication. Attackers with access to the Modbus TCP interface can easily exploit this vulnerability, compromising the device's administrative functionalities. It is crucial for users to apply the necessary patches or updates to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.