description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the affected application are executed with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to inject arbitrary commands that are execeuted instead of the legitimate service.
problem types: CWE-428: Unquoted Search Path or Element
affected:
{
product: SIMATIC RTLS Locating Manager
vendor: Siemens AG
versions:
status: affected, version: All versions < V2.10.2
}