Vulnerabilidades do Siemens TeleControl Server Basic V3.1
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Siemens TeleControl Server Basic V3.1: 2 registro(s), com versões afetadas e correções.
CVE-2025-40765
Crítica · 9.8
CWE-306 14/10/2025
Missing Authentication for Critical Function em Siemens Telecontrol Server Basic
A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.
CVE-2025-30033
Alta · 7.8
CWE-427 12/08/2025
Uncontrolled Search Path Element em Siemens Automation License Manager V6.0
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.