Aller au contenu
en Se connecter
9.6 Critique

CVE-2024-30209 A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1),…

Description

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected systems transmit client-side resources without proper cryptographic protection. This could allow an attacker to eavesdrop on and modify resources in transit. A successful exploit requires an attacker to be in the network path between the RTLS Locating Manager server and a client (MitM).

Produits et versions touchés

Produit Versions touchées Corrigé en
SIMATIC RTLS Locating Manager 3.0 premières → < 3.0.1.1 3.0.1.1
simatic_rtls_locating_manager 3.0 premières → < 3.0 3.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SIMATIC RTLS Locating Manager

Les 20 CVE de SIMATIC RTLS Locating Manager →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Non notée CVE-2025-40751 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3) 6.3 Moyenne CVE-2025-40746 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2) 9.1 Critique CVE-2025-30034 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3) 6.2 Moyenne
Suivre cette CVE