Authorization Bypass Vulnerability in SmartClient Modules by Siemens
CVE-2024-41979

7.5HIGH

Key Information:

Vendor

Siemens
Status
Smartclient Modules Opcenter Ql Home (sc)
Soa Audit
Soa Cockpit
Vendor
CVE Published:
12 August 2025

What is CVE-2024-41979?

A flaw exists in certain SmartClient modules by Siemens, where the application fails to enforce necessary authorization on specific server-side functionalities. This oversight enables an authenticated attacker to potentially attain full access to the application. Affected modules include various versions of Opcenter QL Home, SOA Audit, and SOA Cockpit, specifically those from version 13.2 up to but not including version 2506. Proper assessment and remediation are essential to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SmartClient modules Opcenter QL Home (SC) V13.2

SOA Audit V13.2

SOA Cockpit V13.2

References

https://cert-portal.siemens.com/productcert/html/ssa-3829...

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.