PT-2021-9135

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.12 Description A vulnerability has been identified where the affected application writes sensitive data, such as database credentials, in configuration files. A local attacker with access to t...

PT-2021-9134

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.12 Description A vulnerability has been identified where the affected application writes sensitive data, such as usernames and passwords, in log files. A local attacker with access to the log...

CVE-2020-10054: Improper Input Validation

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.12. The affected application does not properly handle the import of large configuration files. A local attacker could import a specially crafted file which could lead to a denial-of-service condition of the...

CVE-2020-10053: Cleartext Storage of Sensitive Information

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.12. The affected application writes sensitive data, such as database credentials in configuration files. A local attacker with access to the configuration files could use this information to launch further attack...

CVE-2020-10052: Insertion of Sensitive Information into Log File

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.12. The affected application writes sensitive data, such as usernames and passwords in log files. A local attacker with access to the log files could use this information to launch further attacks...

PT-2021-9136

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.12 Description A issue has been identified where the application does not properly handle the import of large configuration files. This could allow a local attacker to import a specially craft...

Siemens SIMATIC RTLS Locating Manager

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC RTLS Locating Manager Vulnerabilities: Insertion of Sensitive Information into Log File, Cleartext Storage of Sensitive Information, Improper Input Validation 2. RISK EVALUATION Successful...

CVE-2020-10050

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts...

CVE-2020-10050

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts...

PT-2020-11882

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.10.2 Description A local attacker could exploit the vulnerability in the start-stop scripts for the services of the affected application to include arbitrary commands that are executed when...

PT-2020-11883

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.10.2 Description A local attacker could exploit a vulnerability to include arbitrary commands that are executed with SYSTEM privileges when the system restarts, due to the directory of service...

PT-2020-11884

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.10.2 Description A issue has been identified where multiple services of the affected application are executed with SYSTEM privileges, and the call path is not quoted. This could allow a local...

CVE-2020-10051: Unquoted Search Path or Element

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. Multiple services of the affected application are executed with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to inject arbitrary commands that are execeuted instead...

CVE-2020-10049: Incorrect Default Permissions

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

CVE-2020-10050: Incorrect Default Permissions

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts...

Siemens SIMATIC RTLS Locating Manager

1. EXECUTIVE SUMMARY CVSS v3 8.4 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: SIMATIC RTLS Locating Manager Vulnerabilities: Incorrect Default Permissions, Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a privileged...