The vulnerability of microprogrammed software in multifunctional measuring instruments for measuring parameters of electrical networks Siemens SENTRON 7KM PAC, related to access control deficiencies, allows intruders to circumvent existing security restrictions and gain unauthorized access to protected information.

🗓️ 22 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Access control weaknesses in Siemens SENTRON 7KM PAC devices enable attackers to bypass security.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-21483	12 Mar 202412:26	–	circl
CNNVD	Siemens SENTRON 7KM PAC 访问控制错误漏洞	12 Mar 202400:00	–	cnnvd
CNVD	Siemens SENTRON 7KM PAC3x20 Devices Improper Access Control Vulnerability	13 Mar 202400:00	–	cnvd
CVE	CVE-2024-21483	12 Mar 202410:21	–	cve
Cvelist	CVE-2024-21483	12 Mar 202410:21	–	cvelist
EUVD	EUVD-2024-19192	3 Oct 202520:07	–	euvd
ICS	Siemens SENTRON 7KM PAC3x20	12 Mar 202400:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	12 Mar 202400:00	–	ncsc
NVD	CVE-2024-21483	12 Mar 202411:15	–	nvd
Prion	Design/Logic Flaw	12 Mar 202411:15	–	prion

Vulners

Node

siemens_ag siemens_sentron_7km_pac3120_ac/dcRange3.2.3–3.3.0

OR

siemens_ag siemens_sentron_7km_pac3120_dcRange3.2.3–3.3.0

OR

siemens_ag siemens_sentron_7km_pac3220_ac/dcRange3.2.3–3.3.0

OR

siemens_ag siemens_sentron_7km_pac3220_dcRange3.2.3–3.3.0

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-792319.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024031308
web	www.web.nvd.nist.gov/view/vuln/detail

22 Mar 2024 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 34.6

CVSS 24.9

EPSS0.00223

access control Siemens SENTRON measuring instruments unauthorized access security bypass