Improper Error Handling in Siemens SmartClient Modules
CVE-2024-41984

2.1LOW

Key Information:

Vendor

Siemens
Status
Smartclient Modules Opcenter Ql Home (sc)
Soa Audit
Soa Cockpit
Vendor
CVE Published:
12 August 2025

What is CVE-2024-41984?

An improper error handling vulnerability exists in specific Siemens SmartClient modules, which affects all versions of Opcenter QL Home, SOA Audit, and SOA Cockpit from version 13.2 up to but not including version 2506. This flaw occurs when the applications attempt to access inaccessible resources, leading to a potential exposure of system applications to unauthorized access or information leakage.

Affected Version(s)

SmartClient modules Opcenter QL Home (SC) V13.2

SOA Audit V13.2

SOA Cockpit V13.2

References

https://cert-portal.siemens.com/productcert/html/ssa-3829...

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.