Description (CNA)
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the affected application are executed with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to inject arbitrary commands that are execeuted instead of the legitimate service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens AG / SIMATIC RTLS Locating Manager | affected All versions < V2.10.2 |
CWE
CWE-428
References
ADP enrichment
No English description supplied.