CVE-2024-33499

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The affected application assigns incorrect permissions to a user management component. This could allow a privileged attacker to escalate their privileges from the Administrators group to the Systemadministrator group.

• CWE-732

• https://cert-portal.siemens.com/productcert/html/ssa-093430.html
• https://cert-portal.siemens.com/productcert/html/ssa-093430.html

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33493A vulnerability has been identified in Solid Edge (All versi…7.8
• CVE-2024-33494A vulnerability has been identified in SIMATIC RTLS Locating…6.9
• CVE-2024-33495A vulnerability has been identified in SIMATIC RTLS Locating…7.1
• CVE-2024-33496A vulnerability has been identified in SIMATIC RTLS Locating…6.3
• CVE-2024-33497A vulnerability has been identified in SIMATIC RTLS Locating…6.3
• CVE-2024-33498A vulnerability has been identified in SIMATIC RTLS Locating…6.9
• CVE-2024-3350A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-33500A vulnerability has been identified in Mendix Applications u…7.4
• CVE-2024-33501Two improper neutralization of special elements used in an S…6.7
• CVE-2024-33502An improper limitation of a pathname to a restricted directo…7.2
• CVE-2024-33503A improper privilege management vulnerability in Fortinet Fo…7.8
• CVE-2024-33504A use of hard-coded cryptographic key to encrypt sensitive d…7.7