CVE-2020-10049

CVE-2020-10049 is a local privilege escalation vulnerability affecting Siemens SIMATIC RTLS Locating Manager versions prior to V2.10.2. An attacker with local access could inject arbitrary commands into the application's service start-stop scripts, which would then execute with elevated privileges when an administrator interactively manages services. This vulnerability carries a CVSS v3.1 score of 7.3 (High), indicating a high potential for impact on confidentiality, integrity, and availability, with low attack complexity and user interaction required. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.