Siemens TeleControl Server Basic V3.1 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Siemens TeleControl Server Basic V3.1: 2 record(s), with affected versions and fixes.
CVE-2025-40765
Critical · 9.8
CWE-306 Oct 14, 2025
Missing Authentication for Critical Function in Siemens Telecontrol Server Basic
A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.
CVE-2025-30033
High · 7.8
CWE-427 Aug 12, 2025
Uncontrolled Search Path Element in Siemens Automation License Manager V6.0
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.