Insufficient Encryption in Siemens SmartClient Modules
CVE-2024-41982

5.9MEDIUM

Key Information:

Vendor

Siemens
Status
Smartclient Modules Opcenter Ql Home (sc)
Soa Audit
Soa Cockpit
Vendor
CVE Published:
12 August 2025

What is CVE-2024-41982?

A vulnerability exists in Siemens SmartClient modules, including Opcenter QL Home, SOA Audit, and SOA Cockpit, where inadequate encryption protocols are implemented for sensitive information. This weakness could potentially allow authenticated attackers to access confidential data, emphasizing the importance of robust encryption measures to protect sensitive information.

Affected Version(s)

SmartClient modules Opcenter QL Home (SC) V13.2

SOA Audit V13.2

SOA Cockpit V13.2

References

https://cert-portal.siemens.com/productcert/html/ssa-3829...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.