CVE-2020-10050 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2).

What is CVE-2020-10050?

CVE-2020-10050 is a high-severity vulnerability in Siemens AG SIMATIC RTLS Locating Manager, published on 9 Sep 2020.

Official description

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts.

Weakness: CWE-276

Which versions are affected by CVE-2020-10050?

It affects 1 product.

Products include Siemens Simatic Rtls Locating Manager.

How do I fix CVE-2020-10050?

No fix has been published for CVE-2020-10050 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-10050 being exploited?

There is no known exploitation of CVE-2020-10050 in the wild and no public exploit code.

Other vulnerabilities in Siemens AG SIMATIC RTLS Locating Manager

• CVE-2025-40746 Command injection in SIMATIC RTLS Locating Manager Critical 9.4
• CVE-2020-10051 Command injection in SIMATIC RTLS Locating Manager High 7.8
• CVE-2020-10049 Command injection in SIMATIC RTLS Locating Manager High 7.3
• CVE-2025-30034 Denial of service in SIMATIC RTLS Locating Manager Medium 6.9
• CVE-2020-10052 Information disclosure in SIMATIC RTLS Locating Manager Medium 5.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-666m-7m3w-f97c.