CVE-2024-41795

🗓️ 08 Apr 2025 08:22:12Reported by siemensType

Vulnerability in SENTRON Data Manager allows CSRF attacks to alter device settings remotely.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the Data Manager component of Siemens SENTRON 7KT PAC1260, a multi-functional device for measuring parameters of electrical circuits, allows a hacker to perform a CSRF attack.	12 Apr 202500:00	–	bdu_fstec
Circl	CVE-2024-41795	8 Apr 202508:46	–	circl
CNNVD	Siemens SENTRON 7KT PAC1260 Data Manager 跨站请求伪造漏洞	8 Apr 202500:00	–	cnnvd
CNVD	Unspecified Vulnerability in Siemens SENTRON 7KT PAC1260 Data Manager	18 Apr 202500:00	–	cnvd
Cvelist	CVE-2024-41795	8 Apr 202508:22	–	cvelist
EUVD	EUVD-2025-10328	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	8 Apr 202513:57	–	ncsc
NVD	CVE-2024-41795	8 Apr 202509:15	–	nvd
Positive Technologies	PT-2025-15393 · Senron · Senron 7Kt Pac1260 Data Manager	8 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-41795	9 Jan 202609:04	–	redhatcve

NVD

Node

siemens 7kt_pac1260_data_manager_firmware

AND

siemens 7kt_pac1260_data_managerMatch-

[
  {
    "vendor": "Siemens",
    "product": "SENTRON 7KT PAC1260 Data Manager",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-187636.html

17 Jun 2026 07:48Current

7.4High risk

Vulners AI Score7.4

CVSS 3.16.5

CVSS 46.9

EPSS0.00188

SSVC

CWE-352