CNNVD-202508-1023 Information

CNNVD ID

CNNVD-202508-1023

CVE-2024-41985

  • CNNVD Published: 2025-08-12

Description (Chinese)

Siemens SmartClient modules Opcenter QL Home是德国西门子(Siemens)公司的一个客户端模块。 Siemens多款产品存在代码问题漏洞,该漏洞源于会话未过期,可能导致未授权访问。以下产品及版本受到影响:SmartClient modules Opcenter QL Home、SOA Audit和SOA Cockpit V13.2至V2506之前版本。

Description (English)

Siemens SmartClient Modeules Oppenter QL Home is a client module of Siemens in Germany. There is a code gap in multiple Siemens products, which stems from the fact that the session has not expired and may lead to unauthorized access. The following products and versions were affected: SmartClitClitules Opcenter QL Home, SOA Audit and SOA Cockpit V13.2 to V2506.

Hazard Level

Critical

Vulnerability Type

代码问题

Affected Vendor

西门子

Published

2025-08-12

Last Modified

2026-02-24

References

https://cert-portal.siemens.com/productcert/html/ssa-382999.html

Patch

https://cert-portal.siemens.com/productcert/html/ssa-382999.html

Share on: