Siemens Opcenter Quality
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41986US | medium6.8OT elevated | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41985US | high7.3 | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41984US | low3.5 | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41983US | medium4.3 | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41982US | medium5.7OT elevated | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41980US | medium5.7OT elevated | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41979US | high8.0OT elevated | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
references
External citations — patches, advisories, analysis.
- SSA-382999: Multiple Vulnerabilities in Opcenter Quality Before V2506 - CSAF Versionself
- SSA-382999: Multiple Vulnerabilities in Opcenter Quality Before V2506 - HTML Versionself
- ICS Advisory ICSA-25-226-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-226-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (39)
- MitigationSOA Audit
All the users (including in LDAP) should be given the least privileges required
- MitigationSOA Audit
Disable all protocols (SSL v2/v3, TLS 1.0, TLS 1.1) the solution should not use.
- MitigationSOA Audit
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSOA Audit
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSOA Audit
Limit the permission to access those fields using the least privilege strategy
- MitigationSOA Audit
Remove all tools giving possibility to call SOAP-services outside from the SmartClient
- MitigationSOA Cockpit
All the users (including in LDAP) should be given the least privileges required
- MitigationSOA Cockpit
Disable all protocols (SSL v2/v3, TLS 1.0, TLS 1.1) the solution should not use.
- MitigationSOA Cockpit
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSOA Cockpit
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSOA Cockpit
Limit the permission to access those fields using the least privilege strategy
- MitigationSOA Cockpit
Remove all tools giving possibility to call SOAP-services outside from the SmartClient
- MitigationSmartClient modules Opcenter QL Home (SC)
All the users (including in LDAP) should be given the least privileges required
- MitigationSmartClient modules Opcenter QL Home (SC)
Disable all protocols (SSL v2/v3, TLS 1.0, TLS 1.1) the solution should not use.
- MitigationSmartClient modules Opcenter QL Home (SC)
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSmartClient modules Opcenter QL Home (SC)
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSmartClient modules Opcenter QL Home (SC)
Limit the permission to access those fields using the least privilege strategy
- MitigationSmartClient modules Opcenter QL Home (SC)
Remove all tools giving possibility to call SOAP-services outside from the SmartClient
- FixedSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - FixedSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan