CVE-2024-41795

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could allow an unauthenticated attacker to change arbitrary device settings by tricking a legitimate device administrator to click on a malicious link.

• CWE-352

• https://cert-portal.siemens.com/productcert/html/ssa-187636.htmlVendor Advisory

Published

Apr 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41789A vulnerability has been identified in SENTRON 7KT PAC1260 D…7.2
• CVE-2024-41790A vulnerability has been identified in SENTRON 7KT PAC1260 D…7.2
• CVE-2024-41791A vulnerability has been identified in SENTRON 7KT PAC1260 D…6.5
• CVE-2024-41792A vulnerability has been identified in SENTRON 7KT PAC1260 D…7.5
• CVE-2024-41793A vulnerability has been identified in SENTRON 7KT PAC1260 D…7.5
• CVE-2024-41794A vulnerability has been identified in SENTRON 7KT PAC1260 D…9.8
• CVE-2024-41796A vulnerability has been identified in SENTRON 7KT PAC1260 D…6.9
• CVE-2024-41797A vulnerability has been identified in RUGGEDCOM RST2428P (6…5.3
• CVE-2024-41798A vulnerability has been identified in SENTRON 7KM PAC3200 (…9.8
• CVE-2024-41799tgstation-server is a production scale tool for BYOND server…9.9
• CVE-2024-4180The Events Calendar WordPress plugin before 6.4.0.1 does not…9.1
• CVE-2024-41800Craft is a content management system (CMS). Craft CMS 5 allo…7.5