Vulnerabilities fixed in Siemens TeleControl Server

🗓️ 17 Apr 2025 07:14:24Reported by NCSCType

Siemens TeleControl Server Basic fixes SQL injection enabling DB access and code execution.

Reporter	Title	Published	Views	Family All 790
BDU FSTEC	The vulnerability of the UpdateOpcSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the UpdateGateways method in the software for managing and monitoring remote devices in telemetering and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CreateProject method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the UpdateBufferingSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, such as the TeleControl Server Basic, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the UpdateSmtpSettings method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the UpdateTcmSettings method in the software for managing and monitoring removed objects in telemetering and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RestoreFromBackup method in software for managing and monitoring deleted objects in telemetry and telemechanics systems of the TeleControl Server Basic allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Authenticate method in software for managing and monitoring remote objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VerifyUser method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems of the TeleControl Server Basic allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	23 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the UpdateUsers method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.	23 Apr 202500:00	–	bdu_fstec