CVE-2024-30208 | Vulnetix

CVE-2024-30208 PUBLISHED CVSS 6.300000190734863 MEDIUM

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The "DBTest" tool of SIMATIC RTLS Locating Manager does not properly enforce access restriction. This could allow an authenticated local attacker to extract sensitive information from memory.

EPSS 0.20% · 9.4th percentile

Risk Scores

CVSS 3.1

6.300000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C

EPSS Score

0.20%

9.4th percentile

Affected Products

Vendor	Product	Versions
siemens	simatic_rtls_locating_manager	0, 0
Siemens	SIMATIC RTLS Locating Manager	0, 0, 0

Timeline

May 14, 2024 CVE Published
May 15, 2024 EPSS Score
Jun 9, 2024 EPSS Score
Jul 3, 2024 EPSS Score
Jul 28, 2024 EPSS Score
Aug 21, 2024 EPSS Score
Sep 14, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score
Oct 8, 2024 EPSS Score
Nov 2, 2024 EPSS Score
Nov 26, 2024 EPSS Score
Dec 21, 2024 EPSS Score

References

Open in Interactive Console →