A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected SIMATIC RTLS Locating Manager Report Clients do not properly protect credentials that are used to authenticate to the server. This could allow an authenticated local attacker to extract the credentials and use them to escalate their access rights from the Manager to the Systemadministrator role.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Siemens |
|
No data.
No data.
References
History
Tue, 12 Aug 2025 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Siemens
Siemens simatic Rtls Locating Manager |
|
| Vendors & Products |
Siemens
Siemens simatic Rtls Locating Manager |
Tue, 12 Aug 2025 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected SIMATIC RTLS Locating Manager Report Clients do not properly protect credentials that are used to authenticate to the server. This could allow an authenticated local attacker to extract the credentials and use them to escalate their access rights from the Manager to the Systemadministrator role. | |
| Weaknesses | CWE-522 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: siemens
Published: 2025-08-12T11:17:06.481Z
Updated: 2025-08-12T11:17:06.481Z
Reserved: 2025-04-16T08:39:30.031Z
Link: CVE-2025-40751
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-08-12T12:15:36.190
Modified: 2025-08-12T14:25:33.177
Link: CVE-2025-40751
Redhat
No data.