CVE-2025-40746 — Siemens / SIMATIC RTLS Locating Manager

CVE-2025-40746

Siemens / SIMATIC RTLS Locating Manager PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2). Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT Authority/SYSTEM' privileges.

Affected (CNA)

Vendor / product	Versions
Siemens / SIMATIC RTLS Locating Manager	affected 0 before V3.2

CWE

CWE-20

References

https://cert-portal.siemens.com/productcert/html/ssa-493787.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.