SIMATIC RTLS Locating Manager vulnerabilities

8 known vulnerabilities in SIMATIC RTLS Locating Manager from Siemens. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  SIMATIC RTLS Locating Manager: Insufficiently Protected Credentials

  CVE-2025-40751Aug 12, 2025Siemens

  A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected SIMATIC RTLS Locating Manager Report Clients do not properly protect credentials that are used to authenticate to the server. This could allow an authenticated

• 7.2 High severity

  A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2).

  CVE-2025-40746Aug 12, 2025Siemens

  A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2). Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execu

• 9.1 Critical severity

  SIMATIC RTLS Locating Manager: Incorrect Permission Assignment for Critical Resource

  CVE-2024-33499May 14, 2024Siemens

  A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SI

• 9.6 Critical severity

  SIMATIC RTLS Locating Manager: Cleartext Transmission of Sensitive Information

  CVE-2024-30209May 14, 2024Siemens

  A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SI

• 10.0 Critical severity

  SIMATIC RTLS Locating Manager: Use of Hard-coded Cryptographic Key

  CVE-2024-30207May 14, 2024Siemens

  A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SI

• 8.8 High severity

  SIMATIC RTLS Locating Manager: Download of Code Without Integrity Check

  CVE-2024-30206May 14, 2024Siemens

  A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SI

• 7.5 High severity

  OpenSSL: Buffer Copy without Checking Size of Input

  CVE-2022-3786Nov 1, 2022OpenSSLEPSS 92.5%

  A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an applic

• 7.5 High severity

  OpenSSL: Out-of-bounds Write

  CVE-2022-3602Nov 1, 2022OpenSSLEPSS 90.8%

  A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the app