CVE-2024-41789

🗓️ 08 Apr 2025 08:22:02Reported by siemensType

Vulnerability in SENTRON 7KT PAC1260 allows remote execution of arbitrary code with root privileges.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary codes.	9 Apr 202500:00	–	bdu_fstec
Circl	CVE-2024-41789	8 Apr 202508:46	–	circl
CNNVD	Siemens SENTRON 7KT PAC1260 Data Manager 操作系统命令注入漏洞	8 Apr 202500:00	–	cnnvd
CNVD	Siemens SENTRON 7KT PAC1260 Data Manager OS Command Injection Vulnerability (CNVD-2025-07809)	18 Apr 202500:00	–	cnvd
Cvelist	CVE-2024-41789	8 Apr 202508:22	–	cvelist
EUVD	EUVD-2025-10348	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	8 Apr 202513:57	–	ncsc
NVD	CVE-2024-41789	8 Apr 202509:15	–	nvd
Positive Technologies	PT-2025-15387 · Senron · Senron 7Kt Pac1260 Data Manager	8 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-41789	9 Jan 202608:34	–	redhatcve

NVD

Node

siemens 7kt_pac1260_data_manager_firmware

AND

siemens 7kt_pac1260_data_managerMatch-

[
  {
    "vendor": "Siemens",
    "product": "SENTRON 7KT PAC1260 Data Manager",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-187636.html

17 Jun 2026 07:48Current

8High risk

Vulners AI Score8

CVSS 3.17.2 - 9.1

CVSS 49.4

EPSS0.00831

SSVC

CWE-78