Siemens AG Simatic RTLS Locating Manager vulnerabilities

3 vulnerabilities

Known vulnerabilities in Siemens AG Simatic RTLS Locating Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.3CVE-2020-10049siemens agsimatic rtls locating manager+1
EPSS score
0.26%
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system administrators.7.8CVE-2020-10050siemens agsimatic rtls locating manager+1
EPSS score
0.29%
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts.7.8CVE-2020-10051siemens agsimatic rtls locating manager+1
EPSS score
0.33%
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the affected application are executed with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to inject arbitrary commands that are execeuted instead of the legitimate service.