CVE-2020-10053

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V2.12

Description A vulnerability has been identified where the affected application writes sensitive data, such as database credentials, in configuration files. A local attacker with access to the configuration files could use this information to launch further attacks.

Recommendations For versions prior to V2.12, update to version V2.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the configuration files to minimize the risk of exploitation.