CVE-2024-41979 — Siemens / SmartClient modules Opcenter QL Home (SC)

Description (CNA)

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.

Affected (CNA)

Vendor / product	Versions
Siemens / SmartClient modules Opcenter QL Home (SC)	affected V13.2 before V2506
Siemens / SOA Audit	affected V13.2 before V2506
Siemens / SOA Cockpit	affected V13.2 before V2506

CWE

CWE-863

References

https://cert-portal.siemens.com/productcert/html/ssa-382999.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.