CVE-2024-41681 — Siemens / Location Intelligence family

CVE-2024-41681

Siemens / Location Intelligence family PUBLISHED

Description (CNA)

A vulnerability has been identified in Location Intelligence family (All versions < V4.4). The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connection between legitimate clients and the affected device.

Affected (CNA)

Vendor / product	Versions
Siemens / Location Intelligence family	affected 0 before V4.4

CWE

CWE-326

References

https://cert-portal.siemens.com/productcert/html/ssa-720392.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.