Opcenter Quality vulnerabilities

12 known vulnerabilities in Opcenter Quality from Siemens. 12 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Google Brotli Unchecked Return Value Exploited

  CVE-2026-111497Oct 22, 2026GoogleEPSS 82.6%

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a

• 8.1 High severity

  PHP Stale Internal Request-State Exploited

  CVE-2026-109619Oct 21, 2026PHP GroupEPSS 100%

  PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subse

• 9.8 Critical severity

  PHP Memory Corruption Exploited

  CVE-2026-109618Oct 21, 2026PHP GroupEPSS 100%

  PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The su

• 7.3 High severity

  A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions…

  CVE-2024-41985Aug 12, 2025Siemens

  A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session witho

• 8.0 High severity

  SmartClient modules Opcenter QL Home (SC): Incorrect Authorization

  CVE-2024-41979Aug 12, 2025Siemens

  A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory author

• 9.8 Critical severity

  Opcenter Execution Foundation: Heap-based Buffer Overflow

  CVE-2024-49775Dec 16, 2024SiemensEPSS 1.51%

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versio

• 9.8 Critical severity

  Opcenter Quality: Heap-based Buffer Overflow

  CVE-2024-33698Sep 10, 2024SiemensEPSS 1.06%

  A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1),

• 7.5 High severity

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407)…

  CVE-2023-46285Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 7.5 High severity

  Opcenter Execution Foundation: Out-of-bounds Write

  CVE-2023-46284Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 7.5 High severity

  Opcenter Execution Foundation: Buffer Copy without Checking Size of Input

  CVE-2023-46283Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 8.8 High severity

  Opcenter Execution Foundation: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2023-46281Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 7.5 High severity

  Opcenter Quality V13.1: Improper Authentication

  CVE-2022-33736Jul 12, 2022SiemensEPSS 1.36%

  A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead t