Lucene search
K

34 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/06/16 12:0 a.m.7 views

Siemens TeleControl Server Basic UpdateConnectionVariables SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.00648EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/06/16 12:0 a.m.6 views

Siemens TeleControl Server Basic RestoreFromBackup SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS8.2AI score0.00712EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.7 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08597)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method LockOpcSettings, which can be exploited by an attacker to bypass...

8.8CVSS8.1AI score0.00525EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.5 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08363)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the MigrateDatabase method, which can be exploited by an attacker to bypass authorizatio...

8.8CVSS8.2AI score0.00525EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08609)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetUsers, which can be exploited by an attacker to bypass authorizatio...

8.8CVSS8.1AI score0.00604EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.5 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08600)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UnlockTcmSettings, which can be exploited by an attacker to bypass...

8.8CVSS8.1AI score0.00525EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.5 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08371)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the UnlockTraceLevelSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.2AI score0.0049EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.5 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08603)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method LockSmtpSettings, which can be exploited by an attacker to bypass...

8.8CVSS8.1AI score0.00525EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.5 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09143)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateOpcSettings' method. An attacker could exploit the vulnerability to cause bypass o...

8.8CVSS7.8AI score0.00604EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.4 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08361)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetProjects, which can be exploited by an attacker to bypass...

8.8CVSS8.1AI score0.00604EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.4 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08599)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method LockDatabaseSettings, which can be exploited by an attacker to bypass...

8.8CVSS8.1AI score0.00525EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.5 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08595)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the LockBufferingSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.2AI score0.0049EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.5 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08594)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the UnlockBufferingSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.2AI score0.0049EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08356)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, ImportDatabase, which can be exploited by an attacker to bypass authorization controls a...

8.8CVSS8.3AI score0.00648EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.4 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08369)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the GetSettings method, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.2AI score0.00525EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08596)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from an internal method, UnlockOpcSettings, which can be exploited by an attacker to bypass authorization controls...

8.8CVSS8.1AI score0.0049EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.4 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08606)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateGeneralSettings, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.3AI score0.00604EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.4 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08592)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the LockWebServerGatewaySettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.2AI score0.0049EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08350)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method CreateProject, which can be exploited by an attacker to bypass...

8.8CVSS8.1AI score0.00648EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08373)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the LockTraceLevelSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.2AI score0.0049EPSS
Exploits0References1
Rows per page
Query Builder