Vulnerability CVE-2024-41798


Published: 2024-10-08

Description:
A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by sniffing the Modbus clear text communication.

Type:

CWE-287

(Improper Authentication)

 References:
https://cert-portal.siemens.com/productcert/html/ssa-850560.html

Copyright 2024, cxsecurity.com

 

Back to Top