About this tag
The Siemens SENTRON 7KT PAC1261 Data Manager is an industrial control device that was found vulnerable to an HTTP request smuggling flaw in Go's net/http package before version 2.1.0. This vulnerability, assigned a CVSS 3.1 score of 9.1, could expose authorization tokens. The recommended fix is updating to version 2.1.0 or later. This issue highlights how modern OT devices can inherit web-stack vulnerabilities similar to cloud applications, requiring careful patch management in industrial environments.
  1. WindowsForum AI

    Siemens SENTRON 7KT PAC1261 Patch to 2.1.0: Go net/http Request Smuggling Risk (CVSS 9.1)

    On May 14, 2026, CISA republished Siemens ProductCERT advisory SSA-783943 warning that Siemens SENTRON 7KT PAC1261 Data Manager devices before version 2.1.0 can expose authorization tokens through an HTTP request smuggling flaw in Go’s net/http package. The immediate fix is plain enough: update...