Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:location_intelligence:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductLocation Intelligence (acf15c98-7b5b-561d-a37f-531011605d29)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41683 vulnerable 2026-06-08 06:43:54.854548 Details available
MEDIUM (5.3)
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce a strong user password policy. This could facilitate a brute force attack against legitimate user passwords.
Published: 2024-08-13T07:54:21.192Z
Updated: 2024-08-13T13:22:32.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41682 vulnerable 2026-06-08 06:43:54.854112 Details available
MEDIUM (5.3)
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated remote attacker to conduct brute force attacks against legitimate user passwords.
Published: 2024-08-13T07:54:19.932Z
Updated: 2024-08-13T17:54:30.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41681 vulnerable 2026-06-08 06:43:54.853493 Details available
MEDIUM (6.7)
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connection between legitimate clients and the affected device.
Published: 2024-08-13T07:54:18.686Z
Updated: 2024-08-13T13:50:59.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23816 vulnerable 2026-06-08 06:29:40.649667 Details available
CRITICAL (9.8)
A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0) (All versions < V4.3), Location Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0) (All versions < V4.3), Location Intelligence Perpetual Small (9DE5110-8CA11-1AX0) (All versions < V4.3), Location Intelligence SUS Large (9DE5110-8CA13-1BX0) (All versions < V4.3), Location Intelligence SUS Medium (9DE5110-8CA12-1BX0) (All versions < V4.3), Location Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0) (All versions < V4.3), Location Intelligence SUS Small (9DE5110-8CA11-1BX0) (All versions < V4.3). Affected products use a hard-coded secret value for the computation of a Keyed-Hash Message Authentication Code. This could allow an unauthenticated remote attacker to gain full administrative access to the application.
Published: 2024-02-13T09:00:27.125Z
Updated: 2025-05-09T18:28:24.829Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.