CVE-2020-10054

published 2021-11-09

CVE-2020-10054: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application does not properly handle the import of…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application does not properly handle the import of large configuration files. A local attacker could import a specially crafted file which could lead to a denial-of-service condition of the application service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	simatic_rtls_locating_manager	< 2.12	2.12
siemens	simatic_rtls_locating_manager	—	—

CWE-20