LockUser Method Code Execution

The vulnerability of the LockUser method in software for managing and monitoring removed objects in telemetry and telemechanics systems related to the TeleControl Server Basic is associated with the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a...

CVE-2025-32843

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockUser' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write ...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, LockUser, which can be exploited by an attacker to bypass authorization controls and...

PT-2025-16844

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description A SQL injection vulnerability has been identified, allowing an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, an...

CVE-2025-32843: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockUser' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write ...