ID
VAR-202410-0128
CVE
CVE-2024-41798
TITLE
Siemens SENTRON PAC Meter Authentication Error Vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2024-40010
DESCRIPTION
A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by sniffing the Modbus clear text communication. SENTRON PAC Meter is a power measurement device for precise energy management and transparent information collection
Trust: 1.44
sources:
NVD: CVE-2024-41798 //
CNVD: CNVD-2024-40010
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2024-40010
AFFECTED PRODUCTS
| vendor: | siemens | model: | sentron 7km pac3200 | scope: | - | version: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2024-40010
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
sources:
CNVD: CNVD-2024-40010 //
NVD: CVE-2024-41798
PROBLEMTYPE DATA
| problemtype: | CWE-287 | Trust: 1.0 |
sources:
NVD: CVE-2024-41798
EXTERNAL IDS
| db: | SIEMENS | id: | SSA-850560 | Trust: 1.6 |
| db: | NVD | id: | CVE-2024-41798 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2024-40010 | Trust: 0.6 |
sources:
CNVD: CNVD-2024-40010 //
NVD: CVE-2024-41798
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-850560.html | Trust: 1.6 |
sources:
CNVD: CNVD-2024-40010 //
NVD: CVE-2024-41798
SOURCES
| db: | CNVD | id: | CNVD-2024-40010 |
| db: | NVD | id: | CVE-2024-41798 |
LAST UPDATE DATE
2024-10-11T22:52:20.853000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-40010 | date: | 2024-10-10T00:00:00 |
| db: | NVD | id: | CVE-2024-41798 | date: | 2024-10-10T12:56:30.817 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-40010 | date: | 2024-10-10T00:00:00 |
| db: | NVD | id: | CVE-2024-41798 | date: | 2024-10-08T09:15:11.177 |