CVE-2024-41984
lowPriorität · verfolgen · 14EPSS 0.002 · 5. PerzentilDEEUUSEPSS · bewertet 2026-10-28
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application improperly handles error while accessing an inaccessible resource leading to exposing the system applications.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSOA Auditsiemens_psirt
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpitsiemens_psirt
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)siemens_psirt
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Auditcisa_csaf_ot
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpitcisa_csaf_ot
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)cisa_csaf_ot
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - MitigationSOA Auditsiemens_psirt
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSOA Cockpitsiemens_psirt
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSmartClient modules Opcenter QL Home (SC)siemens_psirt
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSOA Auditcisa_csaf_ot
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSOA Cockpitcisa_csaf_ot
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSmartClient modules Opcenter QL Home (SC)cisa_csaf_ot
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (13)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-382999SSA-382999: Multiple Vulnerabilities in Opcenter Quality Before V25062025-08-12csaf · siemens_psirtDE
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- ICSA-25-226-06Siemens Opcenter Quality2025-08-12icsa · cisa_csaf_otUS
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (3)
Externe Belege — Patches, Meldungen, Analysen.
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan