CVE-2025-27495

An attacker sends a specially crafted request to port 8000 of the TeleControl Server Basic service, exploiting the lack of input validation in the 'CreateTrace' method. Injection of malicious SQL code allows bypassing authorization mechanisms, reading and writing data in the application database, as well as executing code in the context of the 'NT AUTHORITY\NetworkService' account privileges. The attack is possible only when the attacker has network access to port 8000 of the system running the vulnerable version of the application.

An attacker can read and modify data in the application database, bypass authorization mechanisms, and execute code with the privileges of the 'NT AUTHORITY\NetworkService' account, which may lead to further system integrity violations.

Update Siemens TeleControl Server Basic to version V3.1.2.2 or later. Additionally, it is recommended to restrict network access to port 8000 exclusively to trusted hosts (e.g., through firewall or network segmentation), in accordance with the manufacturer's recommendations available at: https://cert-portal.siemens.com/productcert/html/ssa-443402.html

Siemens TeleControl Server Basic — all versions below V3.1.2.2