High severity · published Aug 12, 2025
CVE-2024-41985
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
7.3
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
SOA Audit · Siemens
V13.2 before V2506 · source: vendor
SC
SOA Cockpit · Siemens
V13.2 before V2506 · source: vendor
SM
SmartClient modules Opcenter QL Home (SC) · Siemens
V13.2 before V2506 · source: vendor
OQ
Opcenter Quality · Siemens
13.2 · source: NVD
Affected product
SM
SmartClient modules Opcenter QL Home (SC)
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-41985
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-41985
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-382999.html
More from SmartClient modules Opcenter QL Home (SC)
8.0
CVE-2024-41979
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
6.8
CVE-2024-41986
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
5.7
CVE-2024-41982
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
5.7
CVE-2024-41980
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…
4.3
CVE-2024-41983
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All…