CVE-2024-23816

CVE-2024-23816 affects Siemens Location Intelligence products (Perpetual Large/Medium/Non-Prod/Small and SUS Large/Medium/Non-Prod/Small). Root cause: use of a hard-coded secret for Keyed-Hash Message Authentication Code computation, enabling an unauthenticated remote attacker to gain full admini...

CVE-2024-41681

Siemens Location Intelligence (web-based Location Intelligence) is affected for all versions before V4.4. The root issue is that the web server is configured to support weak ciphers by default, enabling an on-path attacker in an adjacent network position to read and modify data between clients an...

CVE-2024-41682

CVE-2024-41682 affects Siemens Location Intelligence (all versions before V4.4). The root cause is the application’s failure to enforce a limit on excessive authentication attempts, enabling an unauthenticated remote attacker to perform brute-force password attacks. From connected sources, the re...

CVE-2024-41683

CVE-2024-41683 affects Siemens Location Intelligence (web-based application) prior to version 4.4. The vulnerability is listed as Weak Password Requirements (CWE-521): affected products do not enforce a strong user password policy, which could allow a brute-force attack against legitimate user pa...