9.1
Critical
CVE-2025-40746 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2)
Description
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2). Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT Authority/SYSTEM' privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC RTLS Locating Manager 3.2 | earliest → < 3.2 | 3.2 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC RTLS Locating Manager
The 20 CVEs of SIMATIC RTLS Locating Manager →
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Not rated
CVE-2025-40751
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3)
6.3
Medium
CVE-2025-30034
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3)
6.2
Medium
CVE-2024-33583
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1),…
3.3
Low