CVE-2020-10049

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

CVE-2020-10049

CVE-2020-10049 affects Siemens SIMATIC RTLS Locating Manager (all versions

CVE-2020-10050: Incorrect Default Permissions

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts...

Siemens SIMATIC RTLS Locating Manager Elevation of Privilege Vulnerability (CNVD-2020-51250)

SIMATIC RTLS is a real-time wireless positioning system for locating solutions.Siemens SIMATIC RTLS Locating Manager is used for the configuration, operation and maintenance of SIMATIC RTLS installations. An elevation of privilege vulnerability exists in Siemens SIMATIC RTLS Locating Manager. An...

PT-2020-11882

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.10.2 Description A local attacker could exploit the vulnerability in the start-stop scripts for the services of the affected application to include arbitrary commands that are executed when...

PT-2020-11883

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.10.2 Description A local attacker could exploit a vulnerability to include arbitrary commands that are executed with SYSTEM privileges when the system restarts, due to the directory of service...

Siemens SIMATIC RTLS Locating Manager Elevation of Privilege Vulnerability

SIMATIC RTLS is a real-time wireless positioning system for locating solutions.Siemens SIMATIC RTLS Locating Manager is used for the configuration, operation and maintenance of SIMATIC RTLS installations. An elevation of privilege vulnerability exists in Siemens SIMATIC RTLS Locating Manager. An...

CVE-2020-10049: Incorrect Default Permissions

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

PT-2020-11884

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.10.2 Description A issue has been identified where multiple services of the affected application are executed with SYSTEM privileges, and the call path is not quoted. This could allow a local...

Siemens SIMATIC RTLS Locating Manager Elevation of Privilege Vulnerability (CNVD-2020-51249)

SIMATIC RTLS is a real-time wireless positioning system for locating solutions.Siemens SIMATIC RTLS Locating Manager is used for the configuration, operation and maintenance of SIMATIC RTLS installations. An elevation of privilege vulnerability exists in Siemens SIMATIC RTLS Locating Manager. An...

CVE-2020-10051: Unquoted Search Path or Element

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. Multiple services of the affected application are executed with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to inject arbitrary commands that are execeuted instead...

Siemens SIMATIC RTLS Locating Manager

1. EXECUTIVE SUMMARY CVSS v3 8.4 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: SIMATIC RTLS Locating Manager Vulnerabilities: Incorrect Default Permissions, Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a privileged...

DEBIAN-CVE-2020-11619

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean aka spring-aop...

UBUNTU-CVE-2020-11619

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean aka spring-aop...

[SECURITY] Fedora 25 Update: perl-Image-SubImageFind-0.03-13.fc25

Perl module to aide in locating a sub-image within an image...

Logic design loopholes in CCTV cloud computing vehicle satellite positioning system

Cloud Computing Vehicle Satellite Positioning System is a system composed of Global Positioning System GPS and Geographic Information System GIS that can realize the tracking and positioning of vehicles by Hangzhou Zhongguang Technology Development Co. There is a logical design vulnerability in t...