Beveiligingsadvies

CVE-2024-41980

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-12 11:16:35
Laatst bijgewerkt 2025-08-12 15:54:00
Toegewezen door siemens
CVSS-score 3.1
Status PUBLISHED

Beschrijving

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive information.