Security Advisory

CVE-2024-41979

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-12 11:16:34
Last updated 2025-08-12 15:54:33
Assigner siemens
State PUBLISHED

Description

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.