High severity · published Aug 12, 2025
CVE-2024-41979
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
8.0
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
SOA Audit · Siemens
V13.2 before V2506 · source: vendor
SC
SOA Cockpit · Siemens
V13.2 before V2506 · source: vendor
SM
SmartClient modules Opcenter QL Home (SC) · Siemens
V13.2 before V2506 · source: vendor
OQ
Opcenter Quality · Siemens
13.2 · source: NVD
Affected product
SM
SmartClient modules Opcenter QL Home (SC)
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-41979
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-41979
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-382999.html
More from SmartClient modules Opcenter QL Home (SC)
7.3
CVE-2024-41985
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
6.8
CVE-2024-41986
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
5.7
CVE-2024-41982
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
5.7
CVE-2024-41980
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
4.3
CVE-2024-41983
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…