Update File Integrity Vulnerability Affects SIMATIC RTLS Locating Manager Clients

CVE-2024-30206

Summary

A vulnerability exists in SIMATIC RTLS Locating Manager products where the integrity of update files is not adequately verified. This issue affects several versions prior to V3.0.1.1, enabling unauthorized remote attackers to potentially alter update files during transmission. The exploit involves manipulating the communication stream between the server and client, which can deceive an authorized user into unwittingly installing harmful code. This poses a significant risk to the integrity and security of the affected systems.

References