CVE-2020-10052

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.12

Description A vulnerability has been identified where the affected application writes sensitive data, such as usernames and passwords, in log files. A local attacker with access to the log files could use this information to launch further attacks.

Recommendations For versions prior to V2.12, update to version V2.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of exploitation.