Siemens SIMATIC RTLS Locating Manager Credential Protection Vulnerability Allowing Access Escalation

A vulnerability exists in Siemens SIMATIC RTLS Locating Manager Report Clients, all versions prior to 3.3. These clients fail to adequately protect credentials used for server authentication, potentially allowing an authenticated local attacker to intercept these credentials and escalate access rights from the Manager role to the Systemadministrator role.

Impact

Exploitation of this vulnerability could lead to unauthorized access escalation, allowing a user to gain Systemadministrator privileges.

Remediation

Users are advised to update to version 3.3 or later. Additional guidance can be found on the Siemens support portal.