Login Request a demo
High severity · published Aug 12, 2025
CVE-2025-40751
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3)
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected SIMATIC RTLS Locating Manager Report Clients do not properly protect credentials that are used to authenticate to the server. This could allow an authenticated local attacker to extract the credentials and use them to escalate their access rights from the Manager to the Systemadministrator role.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SR
SIMATIC RTLS Locating Manager · Siemens
before V3.3 · source: vendor, NVD
Affected product
SR
SIMATIC RTLS Locating Manager
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40751
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40751
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-707630.html
More from SIMATIC RTLS Locating Manager
10.0
CVE-2024-30207
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions <…
9.6
CVE-2024-30209
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions <…
9.1
CVE-2024-33499
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions <…
8.8
CVE-2024-30206
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions <…
7.8
CVE-2020-10051
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)