SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12
SIMATIC RTLS Locating Manager before V2.12 contains multiple vulnerabilities that could allow an attacker to read sensitive data or trigger a denial-of-service condition of the application service. Siemens has released an update for the SIMATIC RTLS Locating Manager and recommends to update to the latest version.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-10054US | medium5.5 | — | ||
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application does not properly handle the import of large configuration fil… | ||||
| CVE-2020-10053US | medium5.5OT erhöht | — | ||
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application writes sensitive data, such as database credentials in configu… | ||||
| CVE-2020-10052US | medium5.5 | — | ||
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application writes sensitive data, such as usernames and passwords in log… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 - CSAF Versionself
- SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 - PDF Versionself
- SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 - TXT Versionself
Behebungen (6)
- MitigationSIMATIC RTLS Locating Manager
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
- MitigationSIMATIC RTLS Locating Manager
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
- MitigationSIMATIC RTLS Locating Manager
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
- BehobenSIMATIC RTLS Locating Manager
Update to V2.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803363/ - BehobenSIMATIC RTLS Locating Manager
Update to V2.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803363/ - BehobenSIMATIC RTLS Locating Manager
Update to V2.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803363/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan