Lucene search
+L

711 matches found

CNVD
CNVD
added 2025/04/22 12:0 a.m.26 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08371)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the UnlockTraceLevelSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.2AI score0.00595EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08591)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the UnlockWebServerGatewaySettings method, which can be exploited by an attacker to cause...

8.8CVSS7.8AI score0.00595EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.9 views

Siemens TeleControl Server Basic SQL Injection Vulnerability

TeleControl Server Basic is a server software for remote monitoring and control, widely used in industrial automation. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from the internal use of the LockProjectCrossCommunications method that fails to properly...

8.8CVSS8AI score0.00733EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.7 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08602)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockSmtpSettings, which can be exploited by an attacker to bypass authorization contro...

8.8CVSS8.3AI score0.00638EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.7 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08613)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, ImportConnectionVariables, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.3AI score0.00733EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.9 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08356)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, ImportDatabase, which can be exploited by an attacker to bypass authorization controls a...

8.8CVSS8.3AI score0.00787EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.8 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08605)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method LockGeneralSettings, which can be exploited by an attacker to bypass authorization contro...

8.8CVSS8.3AI score0.00733EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.8 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08362)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetActiveProjects, which can be exploited by an attacker to bypass...

8.8CVSS8.1AI score0.00733EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.10 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08620)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockProject, which can be exploited by an attacker to bypass authorization controls an...

8.8CVSS8.3AI score0.00733EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08369)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the GetSettings method, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.2AI score0.00638EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08372)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the UpdateTraceLevelSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.1AI score0.00595EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.10 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08611)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from an internal method, LockGateway, which can be exploited by an attacker to bypass authorization controls and execut...

8.8CVSS8.1AI score0.00733EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.10 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08596)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from an internal method, UnlockOpcSettings, which can be exploited by an attacker to bypass authorization controls...

8.8CVSS8.1AI score0.00595EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/21 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09146)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that can be exploited by an attacker to cause remote code execution...

9.8CVSS8.2AI score0.00956EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/21 12:0 a.m.5 views

Siemens TeleControl Server SQL Injection Vulnerability (CNVD-2025-09150)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that can be exploited by an attacker to bypass authorization controls and execute arbitrary code...

8.8CVSS8.1AI score0.00638EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/21 12:0 a.m.6 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09149)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that can be exploited by an attacker to cause remote code execution...

9.8CVSS8.2AI score0.0099EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/21 12:0 a.m.9 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09147)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that can be exploited by an attacker to cause remote code execution...

9.8CVSS8.2AI score0.00982EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/17 11:15 a.m.18 views

CVE-2025-29931

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected product does not properly validate a length field in a serialized message which it uses to determine the amount of memory to be allocated for deserialization. This could allow an unauthenticated...

6.3CVSS0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 11:5 a.m.67 views

CVE-2025-29931

CVE-2025-29931 affects Siemens TeleControl Server Basic versions prior to 3.1.2.2. The issue arises from insufficient validation of a length field in a serialized message, used to size memory for deserialization, which could allow an unauthenticated remote attacker to force excessive memory alloc...

6.3CVSS6.9AI score0.00418EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/17 11:5 a.m.28 views

CVE-2025-29931

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected product does not properly validate a length field in a serialized message which it uses to determine the amount of memory to be allocated for deserialization. This could allow an unauthenticated...

6.3CVSS0.00418EPSS
SaveExploits0References1
Rows per page
Query Builder