CVE-2024-41979
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.
- Score
- CVSS 3.1 8.0 High
- Status
- Analyzed - productcert@siemens.com
- Published
- 2025-08-12
- Last modified
- 2025-08-12
- Weaknesses
- CWE-863
Affected products
- Opcenter Quality (Siemens)
- Smartclient Modules Opcenter Ql Home Sc (Siemens)
- Soa Audit (Siemens)
- Soa Cockpit (Siemens)
References
- https://cert-portal.siemens.com/productcert/html/ssa-382999.html
