Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing the current password. In combination with a prepared CSRF attack (CVE-2024-41795) an unauthenticated attacker could be able to set the password to an attacker-controlled value.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Vulnerability Type
未经验证的口令修改
Vulnerability Title
Siemens SENTRON 7KT PAC1260 Data Manager 安全漏洞
Vulnerability Description
Siemens SENTRON 7KT PAC1260 Data Manager是德国西门子（Siemens）公司的一款用于电力监测和能耗管理的设备。 Siemens SENTRON 7KT PAC1260 Data Manager存在安全漏洞，该漏洞源于允许未经当前密码验证即可更改登录密码，结合CSRF攻击可设置受控密码。
CVSS Information
N/A
Vulnerability Type
N/A