| Assigner | siemens |
| Reserved | 2024-03-25 |
| Published | 2024-05-14 |
| Updated | 2024-06-11 |
Description
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The "DBTest" tool of SIMATIC RTLS Locating Manager does not properly enforce access restriction. This could allow an authenticated local attacker to extract sensitive information from memory.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C | |
| CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H |
Problem types
CWE-732: Incorrect Permission Assignment for Critical Resource
Product status
Any version before V3.0.1.1
Any version before V3.0.1.1
Any version before V3.0.1.1
Any version before V3.0.1.1
Any version before V3.0.1.1
Any version before V3.0.1.1
Any version before V3.0.1.1
References
https://cert-portal.siemens.com/productcert/html/ssa-093430.html
