Vulnerability · Published Aug 13, 2024 · Assigned by siemens
CVE-2024-41681
Medium 6.7
In plain English
A medium-severity security flaw in Location Intelligence family from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connection between legitimate clients and the affected device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Location Intelligence family | 0 – before V4.4 |
Weakness: CWE-326 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:O/RC:C