We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)
Ok

THREATINT
PUBLISHED

CVE-2024-33494

Reserved:2024-04-23
Published:2024-05-14
Updated:2024-05-15

Description

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected components do not properly authenticate heartbeat messages. This could allow an unauthenticated remote attacker to affected the availability of secondary RTLS systems configured using a TeeRevProxy service and potentially cause loss of data generated during the time the attack is ongoing.



MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C

Problem types

CWE-345: Insufficient Verification of Data Authenticity

Product status

Default status
unknown

Any version before V3.0.1.1
affected

Default status
unknown

Any version before V3.0.1.1
affected

Default status
unknown

Any version before V3.0.1.1
affected

Default status
unknown

Any version before V3.0.1.1
affected

Default status
unknown

Any version before V3.0.1.1
affected

Default status
unknown

Any version before V3.0.1.1
affected

Default status
unknown

Any version before V3.0.1.1
affected

References

https://cert-portal.siemens.com/productcert/html/ssa-093430.html

cve.org CVE-2024-33494

nvd.nist.gov CVE-2024-33494

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-33494