CVE-2024-41986
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-12

Last updated on: 2025-10-22

Assigner: Siemens AG

Description
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application support insecure TLS 1.0 and 1.1 protocol. An attacker could achieve a man-in-the-middle attack and compromise confidentiality and integrity of data.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-12
Last Modified
2025-10-22
Generated
2026-05-07
AI Q&A
2025-08-12
EPSS Evaluated
2026-05-05
NVD
CVE-2024-41986
EUVD
EUVD-2024-54864
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
siemens opcenter_quality 13.2
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-327 The product uses a broken or risky cryptographic algorithm or protocol.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in certain SmartClient modules (Opcenter QL Home, SOA Audit, SOA Cockpit) that support insecure TLS protocols 1.0 and 1.1. Because these outdated protocols are used, an attacker could perform a man-in-the-middle attack, potentially compromising the confidentiality and integrity of data transmitted by the affected applications.


How can this vulnerability impact me? :

The vulnerability can allow an attacker to intercept and manipulate data exchanged between users and the affected SmartClient modules by exploiting insecure TLS protocols. This could lead to unauthorized access to sensitive information and data tampering, impacting data confidentiality and integrity.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart