711 matches found
CVE-2025-32863
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockTraceLevelSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...
CVE-2025-32863
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockTraceLevelSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...
CVE-2025-32863
CVE-2025-32863 affects Siemens TeleControl Server Basic prior to v3.1.2.2. The vulnerability is an SQL injection in the UnlockTraceLevelSettings pathway that can allow an authenticated remote attacker to bypass authorization, read/write the application DB, and execute code with NT AUTHORITY\Netwo...
CVE-2025-32862
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockTraceLevelSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...
CVE-2025-32862
CVE-2025-32862 concerns Siemens TeleControl Server Basic. Affected: all versions
CVE-2025-32862
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockTraceLevelSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...
CVE-2025-32861
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateTraceLevelSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...
CVE-2025-32861
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateTraceLevelSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...
CVE-2025-32861
CVE-2025-32861 (TeleControl Server Basic) : The Siemens TeleControl Server Basic product is affected in all versions before 3.1.2.2 by a SQL injection in the internal UpdateTraceLevelSettings path, allowing an authenticated remote attacker to bypass authorization, read/write the application datab...
CVE-2025-32860
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, t...
CVE-2025-32860
CVE-2025-32860 affects Siemens TeleControl Server Basic before version 3.1.2.2. The vulnerability is an SQL injection via the internal UnlockWebServerGatewaySettings method, enabling an authenticated remote attacker to bypass authorization, read/write the application database, and execute code wi...
CVE-2025-32860
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, t...
CVE-2025-32859
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to...
CVE-2025-32859
The CVE-2025-32859 entry concerns Siemens TeleControl Server Basic prior to version V3.1.2.2, which is vulnerable to SQL injection via the internal LockWebServerGatewaySettings method. An authenticated attacker who can reach port 8000 can bypass authorization and read/write the application databa...
CVE-2025-32859
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to...
CVE-2025-32858
CVE-2025-32858 affects Siemens TeleControl Server Basic (all versions
CVE-2025-32858
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, t...
CVE-2025-32858
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, t...
CVE-2025-32857
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockBufferingSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...