CVE-2024-41985 - A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506)

Back Back to CVE browser

LOW

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506)

Published Aug 12, 2025

2.1

LOW

CVSS 4.0

EPSS 0.17%

Description

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.

Affected products

Vendor Siemens Product SOA Audit Default
n/a
- Version
  V13.2
  Status
  affected
  Constraints
  <V2506
Vendor Siemens Product SOA Cockpit Default
n/a
- Version
  V13.2
  Status
  affected
  Constraints
  <V2506
Vendor Siemens Product SmartClient modules Opcenter QL Home (SC) Default
n/a
- Version
  V13.2
  Status
  affected
  Constraints
  <V2506

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

SOA Audit

n/a

Version	Status	Constraints
V13.2	affected	<V2506

Siemens

SOA Cockpit

n/a

Version	Status	Constraints
V13.2	affected	<V2506

Siemens

SmartClient modules Opcenter QL Home (SC)

n/a

Version	Status	Constraints
V13.2	affected	<V2506

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-613

References (1)

https://cert-portal.siemens.com/productcert/html/ssa-382999.html
Vendor Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-382999.html		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Aug 12, 2025

Updated Aug 12, 2025

Reserved Jul 25, 2024

Link CVE-2024-41985

CISA Vulnrichment

Updated Aug 12, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-41985

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-41985