VDB
CNVD-2024-23115
CNVD-2024-23115
PUBLISHED
CVSS 6.300000190734863 MEDIUM
SIMATIC RTLS Locating Manager用于配置、操作和维护SIMATIC RTLS装置,该装置是一个实时无线定位系统,可提供定位解决方案。 Siemens SIMATIC RTLS Locating Manager存在关键资源权限分配不正确漏洞,该漏洞是由于SIMATIC RTLS定位管理器的“DBTest”工具未能正确执行访问限制。攻击者可利用该漏洞从内存中提取敏感信息。
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| siemens | simatic_rtls_locating_manager | 0 |
| Siemens | SIMATIC RTLS Locating Manager | 0, 0, 0 |
Timeline
- May 14, 2024 CVE Published