High ICSA-25-226-06 7 CVEs

Siemens Opcenter Quality

Published Aug 12, 2025 · Updated Aug 12, 2025

Vendor: Siemens Product: SmartClient modules Opcenter QL Home (SC) Product: SOA Audit Product: SOA Cockpit

Summary

The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 7

High 7.1

CVE-2024-41979

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA A…

Siemens SOA Cockpit SOA Audit SmartClient modules Opcenter QL Home (SC) ICS / OT

Aug 12, 2025
Medium 6.4

CVE-2024-41986

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA A…

Siemens SmartClient modules Opcenter QL Home (SC) SOA Cockpit SOA Audit ICS / OT

Aug 12, 2025
Medium 4.8

CVE-2024-41982

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA A…

Siemens SmartClient modules Opcenter QL Home (SC) SOA Cockpit SOA Audit ICS / OT

Aug 12, 2025
Low 3.5

CVE-2024-41983

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA A…

Siemens SmartClient modules Opcenter QL Home (SC) SOA Cockpit SOA Audit ICS / OT

Aug 12, 2025
Low 3.1

CVE-2024-41980

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA A…

Siemens SOA Audit SmartClient modules Opcenter QL Home (SC) SOA Cockpit ICS / OT

Aug 12, 2025
Low 2.6

CVE-2024-41984

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA A…

Siemens SmartClient modules Opcenter QL Home (SC) SOA Cockpit SOA Audit ICS / OT

Aug 12, 2025
Low 2.6

CVE-2024-41985

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA A…

Siemens SOA Audit SmartClient modules Opcenter QL Home (SC) SOA Cockpit ICS / OT

Aug 12, 2025

Revision history

2025-08-12 #1
Publication Date

References

SSA-382999: Multiple Vulnerabilities in Opcenter Quality Before V2506 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-382999.html
ICS Advisory ICSA-25-226-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-06
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B