Skip to main content
← All vulnerabilities
CVE-2024-33583

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manage

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V3.0.1.1
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected application contains a hidden configuration item to enable debug functionality. This could allow an authenticated local attacker to gain insight into the internal configuration of the deployment.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

  • Siemens SIMATIC RTLS Locating Manager

    fixed in V3.0.1.1

References 1

cert-portal.siemens.com