CVE-2024-41681

A vulnerability has been identified in Location Intelligence family (All versions < V4.4). The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connection between legitimate clients and the affected device.

• CWE-326

• https://cert-portal.siemens.com/productcert/html/ssa-720392.htmlVendor Advisory

Published

Aug 13, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41675CKAN is an open-source data management system for powering d…6.1
• CVE-2024-41676Magento-lts is a long-term support alternative to Magento Co…4.8
• CVE-2024-41677Qwik is a performance focused javascript framework. A potent…6.1
• CVE-2024-41678GLPI is a free asset and IT management software package. An …6.1
• CVE-2024-41679GLPI is a free asset and IT management software package. An …8.8
• CVE-2024-4168A vulnerability was found in Tenda 4G300 1.01.42. It has bee…8.8
• CVE-2024-41682A vulnerability has been identified in Location Intelligence…5.3
• CVE-2024-41683A vulnerability has been identified in Location Intelligence…5.3
• CVE-2024-41684This vulnerability exists in SyroTech SY-GPON-1110-WDONT Rou…5.3
• CVE-2024-41685This vulnerability exists in SyroTech SY-GPON-1110-WDONT Rou…7.5
• CVE-2024-41686This vulnerability exists in SyroTech SY-GPON-1110-WDONT Rou…3.3
• CVE-2024-41687This vulnerability exists in SyroTech SY-GPON-1110-WDONT Rou…7.5