CVE-2024-41985: Siemens Opcenter Quality

High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.

Affected products

• Siemens Opcenter Quality: version 13.2 only

Published 2025-08-12. Last modified 2026-06-17.