CVE-2025-40746

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2). Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT Authority/SYSTEM' privileges.

• CWE-20

• https://cert-portal.siemens.com/productcert/html/ssa-493787.htmlVendor Advisory

Published

Aug 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-40740A vulnerability has been identified in Solid Edge SE2025 (Al…7.8
• CVE-2025-40741A vulnerability has been identified in Solid Edge SE2025 (Al…7.8
• CVE-2025-40742A vulnerability has been identified in SIPROTEC 5 6MD84 (CP3…6
• CVE-2025-40743A vulnerability has been identified in SINUMERIK 828D PPU.4 …8.7
• CVE-2025-40744A vulnerability has been identified in Solid Edge SE2025 (Al…8.7
• CVE-2025-40745A vulnerability has been identified in Siemens Software Cent…6.3
• CVE-2025-4075A vulnerability was found in VMSMan up to 20250416. It has b…5.3
• CVE-2025-40751A vulnerability has been identified in SIMATIC RTLS Locating…7.8
• CVE-2025-40752A vulnerability has been identified in POWER METER SICAM Q10…6.8
• CVE-2025-40753A vulnerability has been identified in POWER METER SICAM Q10…6.8
• CVE-2025-40755A vulnerability has been identified in SINEC NMS (All versio…8.8
• CVE-2025-40757A vulnerability has been identified in APOGEE PXC Series (BA…6.3