CVE-2025-30034

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected devices do not properly validate input sent to its listening port on the local loopback interface. This could allow an unauthenticated local attacker to cause a denial of service condition.

• CWE-617

• https://cert-portal.siemens.com/productcert/html/ssa-707630.htmlVendor Advisory

Published

Aug 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30028A vulnerability in Active Backup for Business allows unautho…8.6
• CVE-2025-3003A vulnerability, which was classified as critical, was found…6.3
• CVE-2025-30030A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-30031A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-30032A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-30033The affected setup component is vulnerable to DLL hijacking.…8.5
• CVE-2025-30035The vulnerability enables an attacker to fully bypass authen…9
• CVE-2025-30036Stored XSS vulnerability exists in the "Oddział" (Ward) modu…8.8
• CVE-2025-30037The system exposes several endpoints, typically including "/…8.8
• CVE-2025-30038The vulnerability consists of a session ID leak when saving …7.3
• CVE-2025-30039Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActi…9
• CVE-2025-3004A vulnerability has been found in Sayski ForestBlog up to 20…5.4