CVE-2024-30209

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected systems transmit client-side resources without proper cryptographic protection. This could allow an attacker to eavesdrop on and modify resources in transit. A successful exploit requires an attacker to be in the network path between the RTLS Locating Manager server and a client (MitM).

• CWE-319

• https://cert-portal.siemens.com/productcert/html/ssa-093430.html
• https://cert-portal.siemens.com/productcert/html/ssa-093430.html

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30203In Emacs before 29.3, Gnus treats inline MIME contents as tr…5.5
• CVE-2024-30204In Emacs before 29.3, LaTeX preview is enabled by default fo…2.8
• CVE-2024-30205In Emacs before 29.3, Org mode considers contents of remote …7.1
• CVE-2024-30206A vulnerability has been identified in SIMATIC RTLS Locating…8.8
• CVE-2024-30207A vulnerability has been identified in SIMATIC RTLS Locating…10
• CVE-2024-30208A vulnerability has been identified in SIMATIC RTLS Locating…6.3
• CVE-2024-3021The Mhr Post Ticker plugin for WordPress is vulnerable to St…4.4
• CVE-2024-30210IO-1020 Micro ELD uses a default WIFI password that could al…7.4
• CVE-2024-30211Improper access control in some Intel(R) ME driver pack inst…6
• CVE-2024-30212If a SCSI READ(10) command is initiated via USB using the la…7
• CVE-2024-30213StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 …8.8
• CVE-2024-30214The application allows a high privilege attacker to append a…4.8