Vulnerability · Published Aug 12, 2025 · Assigned by siemens
CVE-2024-41983
Low 3.5
In plain English
A low-severity security flaw in SmartClient modules Opcenter QL Home (SC) from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.2%top 88.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application displays SQL statement in the error messages encountered during the generation of reports using Cockpit tool.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SmartClient modules Opcenter QL Home (SC) | V13.2 – before V2506 |
| Siemens | SOA Audit | V13.2 – before V2506 |
| Siemens | SOA Cockpit | V13.2 – before V2506 |
Weakness: CWE-209 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N