7kt Pac1260 Data Manager Firmware vulnerabilities
6 known vulnerabilities in 7kt Pac1260 Data Manager Firmware from Siemens. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
SENTRON 7KT PAC1260 Data Manager: Use of Hard-coded Credentials
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to g
- 7.5 High severity
SENTRON 7KT PAC1260 Data Manager: Missing Authentication for Critical Functionality
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker
- 7.5 High severity
SENTRON 7KT PAC1260 Data Manager: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could allow an unauthenticated attacker it to access arbitrary files on the device with
- 7.2 High severity
SENTRON 7KT PAC1260 Data Manager: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the region parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitra
- 7.2 High severity
SENTRON 7KT PAC1260 Data Manager: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbit
- 7.2 High severity
SENTRON 7KT PAC1260 Data Manager: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the input parameters in specific GET requests. This could allow an authenticated remote attacker to execute arbitrar