VDB
CNVD-2025-07810
CNVD-2025-07810
PUBLISHED
CVSS 9.100000381469727 CRITICAL
Siemens SENTRON 7KT PAC1260 Data Manager是德国西门子（Siemens）公司的一款用于电力监测和能耗管理的设备。 Siemens SENTRON 7KT PAC1260 Data Manager存在OS命令注入漏洞，该漏洞源于未清理特定POST请求的region参数，攻击者可利用此漏洞以root权限执行任意代码。
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SENTRON 7KT PAC1260 Data Manager | 0 |
Timeline
- Apr 8, 2025 CVE Published
- Apr 8, 2025 PoC Published
- Apr 8, 2025 PoC Published
- Apr 8, 2025 PoC Published
- Apr 8, 2025 PoC Published
- Apr 9, 2025 PoC Published
- Apr 10, 2025 PoC Published