CVE-2024-41681 | BDVDB-2026-245388 Detail
SiemensLocation Intelligence family
Description#
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connection between legitimate clients and the affected device.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact high, availability impact high. Attack vector: adjacent.
Weaknesses#
- CWE-326 Inadequate Encryption Strength
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.