CVE-2024-41979: Siemens Opcenter Quality

High severity, CVSS 8.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.

Affected products

• Siemens Opcenter Quality: version 13.2 only

Published 2025-08-12. Last modified 2026-06-17.