CVE-2024-21483

A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3120 DC (7KM3120-1BA01-1EA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3220 AC/DC (7KM3220-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3220 DC (7KM3220-1BA01-1EA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)). The read out protection of the internal flash of affected devices was not properly set at the end of the manufacturing process. An attacker with physical access to the device could read out the data.

• CWE-284

• https://cert-portal.siemens.com/productcert/html/ssa-792319.html
• https://cert-portal.siemens.com/productcert/html/ssa-792319.html

Published

Mar 12, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21478transient DOS when setting up a fence callback to free a KGS…5.5
• CVE-2024-21479Transient DOS during music playback of ALAC content.7.5
• CVE-2024-2148A vulnerability classified as critical has been found in Sou…8.8
• CVE-2024-21480Memory corruption while playing audio file having large-size…9.8
• CVE-2024-21481Memory corruption when preparing a shared memory notificatio…8.4
• CVE-2024-21482Memory corruption during the secure boot process, when the `…7.8
• CVE-2024-21484Versions of the package jsrsasign before 11.0.0 are vulnerab…5.9
• CVE-2024-21485Versions of the package dash-core-components before 2.13.0; …5.4
• CVE-2024-21488Versions of the package network before 0.7.0 are vulnerable …9.8
• CVE-2024-21489Versions of the package uplot before 1.6.31 are vulnerable t…8.2
• CVE-2024-2149A vulnerability classified as critical was found in CodeAstr…7.2
• CVE-2024-21490This affects versions of the package angular from 1.3.0; ver…7.5