Simatic Rtls Locating Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simatic_rtls_locating_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic Rtls Locating Manager (d236c9c0-77d8-5eaa-b64c-0b57c2bf19ff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-40751 |
vulnerable | 2026-06-08 07:25:05.516454 |
Details available
MEDIUM (6.3)
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected SIMATIC RTLS Locating Manager Report Clients do not properly protect credentials that are used to authenticate to the server. This could allow an authenticated local attacker to extract the credentials and use them to escalate their access rights from the Manager to the Systemadministrator role.
Published: 2025-08-12T11:17:06.481Z
Updated: 2025-08-13T20:18:34.434Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40746 |
vulnerable | 2026-06-08 07:25:05.516089 |
Details available
CRITICAL (9.1)
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2). Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT Authority/SYSTEM' privileges.
Published: 2025-08-12T11:17:05.245Z
Updated: 2025-08-13T20:18:41.226Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30034 |
vulnerable | 2026-06-08 07:16:59.006253 |
Details available
MEDIUM (6.2)
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected devices do not properly validate input sent to its listening port on the local loopback interface. This could allow an unauthenticated local attacker to cause a denial of service condition.
Published: 2025-08-12T11:16:58.223Z
Updated: 2025-08-12T20:09:02.333Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33583 |
vulnerable | 2026-06-08 06:37:31.695251 |
Details available
LOW (3.3)
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected application contains a hidden configuration item to enable debug functionality. This could allow an authenticated local attacker to gain insight into the internal configuration of the deployment.
Published: 2024-05-14T10:03:06.924Z
Updated: 2024-08-02T02:36:04.133Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33499 |
vulnerable | 2026-06-08 06:37:31.202657 |
Details available
CRITICAL (9.1)
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The affected application assigns incorrect permissions to a user management component. This could allow a privileged attacker to escalate their privileges from the Administrators group to the Systemadministrator group.
Published: 2024-05-14T10:03:04.171Z
Updated: 2024-08-02T02:36:03.947Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33498 |
vulnerable | 2026-06-08 06:37:31.202223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33497 |
vulnerable | 2026-06-08 06:37:31.199800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33496 |
vulnerable | 2026-06-08 06:37:31.199404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33495 |
vulnerable | 2026-06-08 06:37:31.198979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33494 |
vulnerable | 2026-06-08 06:37:31.198464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30209 |
vulnerable | 2026-06-08 06:35:29.249846 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30208 |
vulnerable | 2026-06-08 06:35:29.249432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30207 |
vulnerable | 2026-06-08 06:35:29.248951 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30206 |
vulnerable | 2026-06-08 06:35:29.248229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3786 |
vulnerable | 2026-06-08 05:48:22.334628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3602 |
vulnerable | 2026-06-08 05:48:21.521844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10054 |
vulnerable | 2026-06-08 05:16:34.093600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10053 |
vulnerable | 2026-06-08 05:16:34.093308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10052 |
vulnerable | 2026-06-08 05:16:34.092914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10051 |
vulnerable | 2026-06-08 05:16:34.092657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10050 |
vulnerable | 2026-06-08 05:16:34.092340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10049 |
vulnerable | 2026-06-08 05:16:34.091908 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.