Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-33499

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manage

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V3.0.1.1
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The affected application assigns incorrect permissions to a user management component. This could allow a privileged attacker to escalate their privileges from the Administrators group to the Systemadministrator group.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

References 1

cert-portal.siemens.com