CVE-2017-9944

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-12-27 · updated 2026-06-17
Weakness: CWE-288

Description

A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network.

Affected products

Siemens 7KT PAC1200 data manager (7KT1260) All versions < V2.03: before 2.03 — fixed in 2.03

How to fix

Upgrade to a fixed version: Siemens 7KT PAC1200 data manager (7KT1260) All versions < V2.03 2.03. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/101184
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-971654.pdf
http://www.securityfocus.com/bid/101184
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-971654.pdf

Get alerted when CVE-2017-9944 or the next vulnerability affects your stack