Description
A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by sniffing the Modbus clear text communication.
Published: 2024-10-08
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-39189 A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by sniffing the Modbus clear text communication.
History

Tue, 08 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
First Time appeared Siemens
Siemens sentron Pac3200
CPEs cpe:2.3:h:siemens:sentron_pac3200:-:*:*:*:*:*:*:*
Vendors & Products Siemens
Siemens sentron Pac3200
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 08 Oct 2024 08:45:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by sniffing the Modbus clear text communication.
Weaknesses CWE-287
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Siemens Sentron Pac3200
cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2024-10-08T14:06:17.123Z

Reserved: 2024-07-22T13:39:08.307Z

Link: CVE-2024-41798

cve-icon Vulnrichment

Updated: 2024-10-08T14:06:12.558Z

cve-icon NVD

Status : Deferred

Published: 2024-10-08T09:15:11.177

Modified: 2026-04-15T00:35:42.020

Link: CVE-2024-41798

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses