Session Management Flaw in Siemens Opcenter Products
CVE-2024-41985

2.1LOW

Key Information:

Vendor

Siemens
Status
Smartclient Modules Opcenter Ql Home (sc)
Soa Audit
Soa Cockpit
Vendor
CVE Published:
12 August 2025

What is CVE-2024-41985?

A session management vulnerability has been identified in Siemens Opcenter products including Opcenter QL Home, SOA Audit, and SOA Cockpit. The flaw involves the application failing to expire sessions after inactivity, leaving users vulnerable to unauthorized access if a session remains idle. This situation can potentially lead to significant security risks if an attacker exploits the prolonged session access.

Affected Version(s)

SmartClient modules Opcenter QL Home (SC) V13.2

SOA Audit V13.2

SOA Cockpit V13.2

References

https://cert-portal.siemens.com/productcert/html/ssa-3829...

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.