Siemens SIMATIC RTLS Locating Manager

Name: Siemens SIMATIC RTLS Locating Manager
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical13high4medium0low

updated 2026-10-27

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-3786US	high7.5	92.5% (100th)	Exploit	V2.13.0.3	2022-11-01	3 versions
CVE-2022-3602US	high7.5	90.8% (100th)	Exploit	V2.13.0.3	2022-11-01	3 versions
CVE-2023-38545US	critical9.8	78.7% (100th)	Exploit	no fix	2023-10-18	≤ vers:unknown/*
CVE-2024-30207US	—OT elevated	0.84% (58th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2025-40746US	high7.2	0.67% (52nd)	—	V3.2	2025-08-12	3 versions
CVE-2024-33495US	—	0.64% (50th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2024-33498US	—	0.63% (50th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2024-33499US	—	0.46% (40th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2020-10051US	high7.8	0.33% (26th)	—	V2.10.2	2020-09-09	< V2.10.2
CVE-2024-30206US	—OT elevated	0.31% (23rd)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2025-40587US	—	0.30% (23rd)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2020-10050US	high7.8OT elevated	0.29% (21st)	—	V2.10.2	2020-09-09	< V2.10.2
CVE-2024-33494US	—OT elevated	0.28% (20th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2024-30209US	—OT elevated	0.27% (19th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2026-25656US	—	0.27% (19th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-25655US	—	0.27% (19th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2020-10049US	high7.3OT elevated	0.26% (18th)	—	V2.10.2	2020-09-09	< V2.10.2
CVE-2020-10052US	medium5.5	0.23% (14th)	—	V2.12	2021-11-09	3 versions
CVE-2025-0836US	—OT elevated	0.21% (12th)	—	no fix	2025-12-16	≤ vers:unknown/*
CVE-2020-10054US	medium5.5	0.21% (11th)	—	V2.12	2021-11-09	3 versions
CVE-2025-40936US	—	0.20% (10th)	—	no fix	2025-11-17	≤ vers:unknown/*
CVE-2024-30208US	—	0.20% (10th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2026-23720US	high7.3	0.18% (7th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-23715US	high7.3	0.18% (7th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2024-33583US	—	0.17% (7th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2026-23718US	high7.3	0.16% (5th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2020-10053US	medium5.5OT elevated	0.15% (5th)	—	V2.12	2021-11-09	3 versions
CVE-2026-22923US	—	0.15% (5th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-23717US	high7.3	0.15% (4th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-23716US	high7.3	0.15% (4th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-23719US	high7.3	0.15% (4th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2024-33497US	—	0.15% (4th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2024-33496US	—	0.15% (4th)	—	V3.0.1.1	2024-05-14	0 → V3.0.1.1
CVE-2025-30034US	medium5.5	0.13% (2nd)	—	V3.3	2025-08-12	3 versions
CVE-2025-40751US	high7.8	0.12% (2nd)	—	V3.3	2025-08-12	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-522Insufficiently Protected Credentials3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-1357Reliance on Insufficiently Trustworthy Component2 CVEs
CWE-20Improper Input Validation2 CVEs

sources (4)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)17 CVEs
NLNCSC-NL (CSAF)13 CVEs
USCISA CSAF OT advisories (ICS)11 CVEs
DESiemens ProductCERT (CSAF)8 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan