CVE-2024-30206

CVE-2024-30206 is a high-severity vulnerability affecting multiple versions of Siemens SIMATIC RTLS Locating Manager. The flaw, categorized as CWE-494 (Improper Download of Updates), allows an unauthenticated remote attacker to alter update files in transit due to insufficient integrity checks, potentially leading to the installation of malicious code by an authorized user. This attack requires the adversary to intercept and modify network communication between the server and client. The vulnerability has a CVSS score of 8.8 (HIGH), indicating a high impact on confidentiality, integrity, and availability, with a network attack vector and low attack complexity, but requiring user interaction. Despite its severity, there is currently no evidence of active exploitation, no public exploit code available (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage. The EPSS score is low, suggesting a low probability of exploitation in the wild.