Approved changes feed: RSS · Atom

cpe:2.3:a:siemens_ag:simatic_rtls_locating_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens Ag (6b4625df-dd28-5c6a-8569-4e99d778ef77)
ProductSimatic Rtls Locating Manager (ba5e1c43-8615-58e7-93bd-9a32d34b2568)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10051 vulnerable 2026-06-08 05:16:34.092624 Details available
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the affected application are executed with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to inject arbitrary commands that are execeuted instead of the legitimate service.
Published: 2020-09-09T18:09:58.000Z
Updated: 2024-08-04T10:50:57.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10050 vulnerable 2026-06-08 05:16:34.092300 Details available
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts.
Published: 2020-09-09T18:08:43.000Z
Updated: 2024-08-04T10:50:57.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10049 vulnerable 2026-06-08 05:16:34.091326 Details available
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system administrators.
Published: 2020-09-09T18:06:28.000Z
Updated: 2024-08-04T10:50:57.883Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.