Siemens SENTRON 7KT PAC1260 Data Manager SSH Service Activation Vulnerability

A vulnerability exists in the Siemens SENTRON 7KT PAC1260 Data Manager, in all versions, allowing an unauthenticated remote attacker to enable the SSH service via the device's web interface. This unauthorized activation could facilitate remote access to the device over SSH.

Impact

Exploitation of this vulnerability allows for unauthenticated remote access to the device via SSH, potentially leading to unauthorized actions or access to sensitive information on the device.

Remediation

Siemens no longer provides software fixes for the SENTRON 7KT PAC1260 Data Manager. Users are advised to replace the device with the SENTRON 7KT PAC1261 Data Manager and update to the latest firmware version. The new model is available through the Siemens Industry Mall.