CVE-2017-9944
Critical
Description
A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSiemens 7kt Pac1200 Data Manager Firmware
PublishedDec 27, 2017
First seenDec 27, 2017
Weakness typeCWE-288CWE-288
How to fix
Update
- siemens 7kt_pac1200_data_manager_firmware2.03 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens 7kt_pac1200_data_manager_firmware | v < 2.03 | 2.03 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.