Description
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2). Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT Authority/SYSTEM' privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC RTLS Locating Manager | < V3.2 | V3.2 |
Advisories 3
- NCSC-2025-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 12, 2025
- ICSA-25-226-13 Siemens SIMATIC RTLS Locating Manager CISA ICS & IT advisories · Aug 12, 2025
- SSA-493787 SSA-493787: Arbitrary Code Execution Vulnerability in SIMATIC RTLS Locating Manager Before V3.2 Siemens ProductCERT · Aug 12, 2025