Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-41979

Опубликовано: 12 авг. 2025
Источник: nvd
CVSS3: 7.1
CVSS3: 8
EPSS Низкий

Описание

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:siemens:opcenter_quality:13.2:*:*:*:*:*:*:*

EPSS

Процентиль: 3%
0.00017
Низкий

7.1 High

CVSS3

8 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.1
github
6 месяцев назад

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.

EPSS

Процентиль: 3%
0.00017
Низкий

7.1 High

CVSS3

8 High

CVSS3

Дефекты

CWE-863