[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyALdd5L_fE37g3xjdjh0HbhdFeiX8Ksl43lSh6Jsfww":3,"g5a-ex:siemens\u002Ftelecontrol_server_basic@*":112,"g5a-family:siemens\u002Ftelecontrol_server_basic":114},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":90,"seoMetadata":91,"meta":110},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"siemens","telecontrol_server_basic",5,75,0,"2025-04-17",[14,18,20,22,24],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.0",2,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"3.1",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.0.1",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.2",{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.2.1","Telecontrol Server Basic by Siemens is a technology product with 5 tracked versions and 75 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31,32],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},[34,42,48,54,59,64,70,77,81,84],{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":17,"epssScore":41},"CVE-2018-4837","A vulnerability has been identified in TeleControl Server Basic \u003C V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80\u002Ftcp or 443\u002Ftcp) could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected by the Denial-of-Service condition.","2018-01-25",7.5,"v3.0","High",0.02664,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":38,"cvssVersion":46,"severity":40,"isKev":17,"epssScore":47},"CVE-2021-40142","In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer.","2021-08-27","v3.1",0.02563,{"cveId":49,"description":50,"publishedDate":37,"cvssScore":51,"cvssVersion":39,"severity":52,"isKev":17,"epssScore":53},"CVE-2018-4835","A vulnerability has been identified in TeleControl Server Basic \u003C V3.1. An attacker with network access to the TeleControl Server Basic's port 8000\u002Ftcp could bypass the authentication mechanism and read limited information.",5.3,"Medium",0.02206,{"cveId":55,"description":56,"publishedDate":37,"cvssScore":57,"cvssVersion":39,"severity":40,"isKev":17,"epssScore":58},"CVE-2018-4836","A vulnerability has been identified in TeleControl Server Basic \u003C V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000\u002Ftcp could escalate his privileges and perform administrative operations.",8.8,0.01803,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":38,"cvssVersion":46,"severity":40,"isKev":17,"epssScore":63},"CVE-2019-6575","A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions \u003C V2.7), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants) (All versions \u003C V15.1 Upd 4), SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants) (All versions \u003C V15.1 Upd 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions \u003C V15.1 Upd 4), SIMATIC IPC DiagMonitor (All versions \u003C V5.1.3), SIMATIC NET PC Software V13 (All versions), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC RF188C (All versions \u003C V1.1.0), SIMATIC RF600R family (All versions \u003C V3.2.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 \u003C V2.6.1), SIMATIC S7-1500 Software Controller (All versions between V2.5 (including) and V2.7 (excluding)), SIMATIC WinCC OA (All versions \u003C V3.15 P018), SIMATIC WinCC Runtime Advanced (All versions \u003C V15.1 Upd 4), SINEC NMS (All versions \u003C V1.0 SP1), SINEMA Server (All versions \u003C V14 SP2), SINUMERIK OPC UA Server (All versions \u003C V2.1), TeleControl Server Basic (All versions \u003C V3.1.1). Specially crafted network packets sent to affected devices on port 4840\u002Ftcp could allow an unauthenticated remote attacker to cause a denial of service condition of the OPC communication or crash the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the OPC communication.","2019-04-17",0.01646,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":46,"severity":52,"isKev":17,"epssScore":69},"CVE-2021-45117","The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.","2022-03-21",6.5,0.01417,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":46,"severity":75,"isKev":17,"epssScore":76},"CVE-2025-27495","A vulnerability has been identified in TeleControl Server Basic (All versions \u003C V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'CreateTrace' method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with \"NT AUTHORITY\\NetworkService\" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25911)","2025-04-16",9.8,"Critical",0.01024,{"cveId":78,"description":79,"publishedDate":73,"cvssScore":74,"cvssVersion":46,"severity":75,"isKev":17,"epssScore":80},"CVE-2025-27540","A vulnerability has been identified in TeleControl Server Basic (All versions \u003C V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Authenticate' method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with \"NT AUTHORITY\\NetworkService\" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25913)",0.01015,{"cveId":82,"description":83,"publishedDate":73,"cvssScore":74,"cvssVersion":46,"severity":75,"isKev":17,"epssScore":80},"CVE-2025-27539","A vulnerability has been identified in TeleControl Server Basic (All versions \u003C V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'VerifyUser' method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with \"NT AUTHORITY\\NetworkService\" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.  (ZDI-CAN-25914)",{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":46,"severity":75,"isKev":17,"epssScore":89},"CVE-2024-44102","A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1) (All versions \u003C V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1) (All versions \u003C V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 32 to 64 V3.1 (6NH9910-0AA31-0AF1) (All versions \u003C V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 64 to 256 V3.1 (6NH9910-0AA31-0AC1) (All versions \u003C V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 8 to 32 V3.1 (6NH9910-0AA31-0AB1) (All versions \u003C V3.1.2.1 with redundancy configured), TeleControl Server Basic 1000 V3.1 (6NH9910-0AA31-0AD0) (All versions \u003C V3.1.2.1 with redundancy configured), TeleControl Server Basic 256 V3.1 (6NH9910-0AA31-0AC0) (All versions \u003C V3.1.2.1 with redundancy configured), TeleControl Server Basic 32 V3.1 (6NH9910-0AA31-0AF0) (All versions \u003C V3.1.2.1 with redundancy configured), TeleControl Server Basic 5000 V3.1 (6NH9910-0AA31-0AE0) (All versions \u003C V3.1.2.1 with redundancy configured), TeleControl Server Basic 64 V3.1 (6NH9910-0AA31-0AB0) (All versions \u003C V3.1.2.1 with redundancy configured), TeleControl Server Basic 8 V3.1 (6NH9910-0AA31-0AA0) (All versions \u003C V3.1.2.1 with redundancy configured), TeleControl Server Basic Serv Upgr (6NH9910-0AA31-0GA1) (All versions \u003C V3.1.2.1 with redundancy configured), TeleControl Server Basic Upgr V3.1 (6NH9910-0AA31-0GA0) (All versions \u003C V3.1.2.1 with redundancy configured). The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the affected software, an unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted serialized object. This could allow the attacker to execute arbitrary code on the device with SYSTEM privileges.","2024-11-12",10,0.00996,[],{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"Telecontrol Server Basic by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Telecontrol Server Basic by Siemens covering 5 versions with 75 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Telecontrol Server Basic vulnerabilities, Telecontrol Server Basic security, Telecontrol Server Basic CVE, Siemens Telecontrol Server Basic, Telecontrol Server Basic threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":96,"@type":97,"name":98,"description":93,"url":99,"manufacturer":100,"applicationCategory":104,"softwareVersion":105,"mainEntity":106},"https:\u002F\u002Fschema.org","SoftwareApplication","Telecontrol Server Basic","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Ftelecontrol_server_basic",{"@type":101,"name":102,"url":103},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","5 versions tracked",{"@type":107,"name":108,"description":109,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Telecontrol Server Basic Security Vulnerabilities","Security vulnerabilities affecting Telecontrol Server Basic by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":111,"apiVersion":15},"2026-10-18T22:27:40.444Z",{"rows":113,"total":11,"capped":17,"failed":11},[],[]]