Description
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application does not properly handle the import of large configuration files. A local attacker could import a specially crafted file which could lead to a denial-of-service condition of the application service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC RTLS Locating Manager | All versions < V2.12 | — |
Advisories 2
- ICSA-21-315-11 Siemens SIMATIC RTLS Locating Manager CISA ICS & IT advisories · May 6, 2025
- SSA-145157 SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 Siemens ProductCERT · Nov 9, 2021