LDAP Communication Vulnerability in SmartClient Modules by Siemens
CVE-2024-41980

2LOW

Key Information:

Vendor

Siemens
Status
Smartclient Modules Opcenter Ql Home (sc)
Soa Audit
Soa Cockpit
Vendor
CVE Published:
12 August 2025

What is CVE-2024-41980?

A vulnerability exists in various SmartClient modules from Siemens, affecting versions of Opcenter QL Home, SOA Audit, and SOA Cockpit. The issue stems from the default non-encryption of communications over the LDAP interface, which could enable an authenticated attacker to exploit this weakness. By intercepting these unencrypted communications, the attacker may gain unauthorized access to sensitive information stored within the affected modules.

Affected Version(s)

SmartClient modules Opcenter QL Home (SC) V13.2

SOA Audit V13.2

SOA Cockpit V13.2

References

https://cert-portal.siemens.com/productcert/html/ssa-3829...

CVSS V4

Score:
2
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.