Skip to content
fr Sign in
9.6 Critical

CVE-2024-30209 A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1),…

Description

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected systems transmit client-side resources without proper cryptographic protection. This could allow an attacker to eavesdrop on and modify resources in transit. A successful exploit requires an attacker to be in the network path between the RTLS Locating Manager server and a client (MitM).

Affected products and versions

Product Affected versions Fixed in
SIMATIC RTLS Locating Manager 3.0 earliest → < 3.0.1.1 3.0.1.1
simatic_rtls_locating_manager 3.0 earliest → < 3.0 3.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC RTLS Locating Manager

The 20 CVEs of SIMATIC RTLS Locating Manager →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated CVE-2025-40751 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3) 6.3 Medium CVE-2025-40746 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2) 9.1 Critical CVE-2025-30034 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3) 6.2 Medium
Track this CVE