Skip to content
fr Sign in
5.3 Medium

CVE-2024-33498 A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1),…

Description

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected applications do not properly release memory that is allocated when handling specifically crafted incoming packets. This could allow an unauthenticated remote attacker to cause a denial of service condition by crashing the service when it runs out of memory. The service is restarted automatically after a short time.

Affected products and versions

Product Affected versions Fixed in
SIMATIC RTLS Locating Manager 3.0 earliest → < 3.0.1.1 3.0.1.1
simatic_rtls_locating_manager 3.0 earliest → < 3.0.1.1 3.0.1.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC RTLS Locating Manager

The 20 CVEs of SIMATIC RTLS Locating Manager →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated CVE-2025-40751 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3) 6.3 Medium CVE-2025-40746 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2) 9.1 Critical CVE-2025-30034 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3) 6.2 Medium
Track this CVE