A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manage

Summary

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected systems transmit client-side resources without proper cryptographic protection. This could allow an attacker to eavesdrop on and modify resources in transit. A successful exploit requires an attacker to be in the network path between the RTLS Locating Manager server and a client (MitM).

Timeline

1. May 14, 2024, 10:02 AM UTCCVE published
2. Jul 23, 2024, 6:38 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Aug 2, 2024, 1:25 AM UTCRecord last updated

Affected versions

• Siemens SIMATIC RTLS Locating Manager

  fixed in V3.0.1.1

• Siemens SIMATIC RTLS Locating Manager

  fixed in V3.0.1.1

• Siemens SIMATIC RTLS Locating Manager

  fixed in V3.0.1.1

• Siemens SIMATIC RTLS Locating Manager

  fixed in V3.0.1.1

• Siemens SIMATIC RTLS Locating Manager

  fixed in V3.0.1.1

• Siemens SIMATIC RTLS Locating Manager

  fixed in V3.0.1.1

• Siemens SIMATIC RTLS Locating Manager

  fixed in V3.0.1.1

References 1