CRITICAL🇵🇱 Wersja polska

CVE-2025-40765

CVSS 9.3v4.0pub. 2025-10-14upd. 2025-10-21

A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Siemens Telecontrol Server Basic

    APP
    Siemens
    3.1.2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-27539CRITICAL9.3PL ✓ten sam produkt

SQL Injection w Siemens TeleControl Server Basic – obejście autoryzacji i RCE

CVE-2025-27495CRITICAL9.3PL ✓ten sam produkt

SQL Injection w Siemens TeleControl Server Basic — nieautoryzowany dostęp i RCE

CVE-2025-27540CRITICAL9.3PL ✓ten sam produkt

SQL Injection w Siemens TeleControl Server Basic — ominięcie autoryzacji i RCE

CVE-2024-44102CRITICAL10.0PL ✓ten sam produkt

Siemens TeleControl Server Basic — niebezpieczna deserializacja umożliwiająca RCE z uprawnieniami SYSTEM

CVE-2025-40942HIGH7.3ten sam produkt

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected applicatio...