CVE-2024-30209

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V3.0.1.1

Description A vulnerability has been identified that allows an attacker to eavesdrop on and modify resources in transit due to the lack of proper cryptographic protection for client-side resources. This could be exploited by an attacker in the network path between the RTLS Locating Manager server and a client, enabling a man-in-the-middle (MitM) attack.

Recommendations For SIMATIC RTLS Locating Manager versions prior to V3.0.1.1, update to version V3.0.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the network path between the RTLS Locating Manager server and clients to minimize the risk of exploitation.