SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12
SIMATIC RTLS Locating Manager before V2.12 contains multiple vulnerabilities that could allow an attacker to read sensitive data or trigger a denial-of-service condition of the application service. Siemens has released an update for the SIMATIC RTLS Locating Manager and recommends to update to the latest version.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10054US | medium5.5 | — | ||
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application does not properly handle the import of large configuration fil… | ||||
| CVE-2020-10053US | medium5.5OT elevated | — | ||
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application writes sensitive data, such as database credentials in configu… | ||||
| CVE-2020-10052US | medium5.5 | — | ||
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application writes sensitive data, such as usernames and passwords in log… | ||||
references
External citations — patches, advisories, analysis.
- SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 - CSAF Versionself
- SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 - PDF Versionself
- SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 - TXT Versionself
remediations (6)
- MitigationSIMATIC RTLS Locating Manager
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
- MitigationSIMATIC RTLS Locating Manager
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
- MitigationSIMATIC RTLS Locating Manager
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
- FixedSIMATIC RTLS Locating Manager
Update to V2.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803363/ - FixedSIMATIC RTLS Locating Manager
Update to V2.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803363/ - FixedSIMATIC RTLS Locating Manager
Update to V2.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803363/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan