9.8
Critical
CVE-2024-41798 A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions)
Description
A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by sniffing the Modbus clear text communication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SENTRON 7KM PAC3200 | Versions not published | |
| sentron_pac3200 | Versions not published |