Siemens SIMATIC RTLS Locating Manager Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Siemens SIMATIC RTLS Locating Manager, affecting all versions prior to 3.3. The issue arises because affected devices do not properly validate input sent to their listening port on the local loopback interface. This lack of validation could allow an unauthenticated local attacker to disrupt service.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to update SIMATIC RTLS Locating Manager to version 3.3 or later. Additional guidance can be found on the Siemens support website.