Vulnerability in SIMATIC RTLS Locating Manager Could Allow Eavesdropping and Modification of Resources in Transit

CVE-2024-30209

Summary

A vulnerability in the SIMATIC RTLS Locating Manager affects various versions prior to V3.0.1.1. This issue allows client-side resources to be transmitted without adequate cryptographic protection, exposing the systems to potential eavesdropping and the risk of resource modification during transit. An attacker must position themselves within the network path between the RTLS Locating Manager server and the client to exploit this vulnerability successfully. This could lead to significant security breaches if left unaddressed.

References