Siemens Telecontrol Server Basic vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Siemens Telecontrol Server Basic: 2 record(s), with affected versions and fixes.
cpe:2.3:a:siemens:telecontrol_server_basic

CVE-2025-40942 High · 7.8 CWE-250 Jan 13, 2026

Execution with Unnecessary Privileges in Siemens Telecontrol Server Basic

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected application contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges.

CVE-2025-40765 Critical · 9.8 CWE-306 Oct 14, 2025

Missing Authentication for Critical Function in Siemens Telecontrol Server Basic

A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.