CVE-2024-41983
mediumPriorität · verfolgen · 17EPSS 0.002 · 9. PerzentilDEEUUSEPSS · bewertet 2026-10-28
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application displays SQL statement in the error messages encountered during the generation of reports using Cockpit tool.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSOA Auditsiemens_psirt
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpitsiemens_psirt
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)siemens_psirt
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Auditcisa_csaf_ot
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpitcisa_csaf_ot
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)cisa_csaf_ot
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - MitigationSOA Auditsiemens_psirt
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSOA Cockpitsiemens_psirt
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSmartClient modules Opcenter QL Home (SC)siemens_psirt
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSOA Auditcisa_csaf_ot
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSOA Cockpitcisa_csaf_ot
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSmartClient modules Opcenter QL Home (SC)cisa_csaf_ot
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 1.2–5.1
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (13)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-382999SSA-382999: Multiple Vulnerabilities in Opcenter Quality Before V25062025-08-12csaf · siemens_psirtDE
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- ICSA-25-226-06Siemens Opcenter Quality2025-08-12icsa · cisa_csaf_otUS
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (3)
Externe Belege — Patches, Meldungen, Analysen.
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan