description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system administrators.
problem types: CWE-276: Incorrect Default Permissions
affected:
{
product: SIMATIC RTLS Locating Manager
vendor: Siemens AG
versions:
status: affected, version: All versions < V2.10.2
}