CVE-2020-10051CWE-428

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)

published September 9, 2020

CVSS
—
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the affected application are executed with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to inject arbitrary commands that are execeuted instead of the legitimate service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.7th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2020-09-09T18:09Z
EPSS history
Timeline
  • 09 SEP 18:09Z
    A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)
    cvelistv5