Aller au contenu
en Se connecter
9.1 Critique

CVE-2024-33499 A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1),…

Description

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The affected application assigns incorrect permissions to a user management component. This could allow a privileged attacker to escalate their privileges from the Administrators group to the Systemadministrator group.

Produits et versions touchés

Produit Versions touchées Corrigé en
SIMATIC RTLS Locating Manager 3.0 premières → < 3.0.1.1 3.0.1.1
simatic_rtls_locating_manager 3.0 premières → < 3.0.1.1 3.0.1.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SIMATIC RTLS Locating Manager

Les 20 CVE de SIMATIC RTLS Locating Manager →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Non notée CVE-2025-40751 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3) 6.3 Moyenne CVE-2025-40746 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2) 9.1 Critique CVE-2025-30034 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3) 6.2 Moyenne
Suivre cette CVE