<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: simatic rtls locating manager</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-40751: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions &lt; V3.3)</title><link>https://patchthecve.com/cve/CVE-2025-40751.html</link><guid>https://patchthecve.com/cve/CVE-2025-40751.html</guid><pubDate>Wed, 17 Jun 2026 09:22:04 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions &lt; V3.3). Affected SIMATIC RTLS Locating Manager Report Clients do not properly protect credentials that are used to authenticate to the server. This could allow an authenticated local attacker to extract the credentia</description></item><item><title>CVE-2025-40746: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions &lt; V3.2)</title><link>https://patchthecve.com/cve/CVE-2025-40746.html</link><guid>https://patchthecve.com/cve/CVE-2025-40746.html</guid><pubDate>Wed, 17 Jun 2026 09:22:04 +0000</pubDate><description>CRITICAL 9.1: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions &lt; V3.2). Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with &#x27;NT Authority/SYS</description></item><item><title>CVE-2025-30034: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions &lt; V3.3)</title><link>https://patchthecve.com/cve/CVE-2025-30034.html</link><guid>https://patchthecve.com/cve/CVE-2025-30034.html</guid><pubDate>Wed, 17 Jun 2026 09:08:04 +0000</pubDate><description>MEDIUM 6.2: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions &lt; V3.3). Affected devices do not properly validate input sent to its listening port on the local loopback interface. This could allow an unauthenticated local attacker to cause a denial of service condition.</description></item></channel></rss>