Lucene search
K

711 matches found

Positive Technologies
Positive Technologies
added 2025/03/19 12:0 a.m.3 views

PT-2025-16815 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.5AI score0.00078EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/03/19 12:0 a.m.3 views

PT-2025-16819 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.5AI score0.00078EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/03/19 12:0 a.m.3 views

PT-2025-16820 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: A SQL injection vulnerability has been identified in the affected application through the internally used UpdateGateways method. This could allow an authenticated remote attacker...

9CVSS7.4AI score0.00078EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/03/19 12:0 a.m.4 views

PT-2025-16813 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.5AI score0.00078EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/03/12 12:0 a.m.2 views

PT-2025-16811 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.5AI score0.00078EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/03/12 12:0 a.m.2 views

PT-2025-16812 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.5AI score0.00078EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/03/04 12:0 a.m.2 views

PT-2025-16810 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: A SQL injection vulnerability has been identified in the affected application through the internally used RestoreFromBackup method. This could allow an authenticated remote...

9CVSS7.4AI score0.00052EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/02/21 12:0 a.m.2 views

PT-2025-16808 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an unauthenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

10CVSS7.8AI score0.00053EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/02/21 12:0 a.m.2 views

PT-2025-16809 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: A SQL injection vulnerability has been identified in the affected application through the internally used Authenticate method. This could allow an unauthenticated remote attacker...

10CVSS7.7AI score0.00053EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/02/21 12:0 a.m.2 views

PT-2025-16807 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: A SQL injection vulnerability has been identified in the affected application through the internally used CreateTrace method. This could allow an unauthenticated remote attacker ...

10CVSS7.7AI score0.00053EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/02/04 10:48 p.m.7 views

CVE-2024-44102

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 6NH9910-0AA31-0AE1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 256 to 1000 V3.1 6NH9910-0AA31-0AD1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 3...

10CVSS7.8AI score0.08717EPSS
Exploits0
CNVD
CNVD
added 2024/11/13 12:0 a.m.6 views

Siemens TeleControl Server Basic Deserialization Vulnerability

TeleControl Server Basic allows remote monitoring and control of plants via WAN/LAN. A deserialization vulnerability exists in Siemens TeleControl Server Basic, which can be exploited by an attacker to execute arbitrary code on a device with SYSTEM privileges...

10CVSS7.9AI score0.08717EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 1:15 p.m.7 views

CVE-2024-44102

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 6NH9910-0AA31-0AE1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 256 to 1000 V3.1 6NH9910-0AA31-0AD1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 3...

10CVSS0.08717EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 1:15 p.m.1 views

CVE-2024-44102

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 6NH9910-0AA31-0AE1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 256 to 1000 V3.1 6NH9910-0AA31-0AD1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 3...

10CVSS6.2AI score0.08717EPSS
Exploits0References1
CVE
CVE
added 2024/11/12 12:49 p.m.57 views

CVE-2024-44102

Summary: CVE-2024-44102 affects Siemens TeleControl Server Basic (various edition/versions listed in the CVE) where remote attackers can trigger a deserialization of user-supplied content, allowing an unauthenticated attacker to execute arbitrary code with SYSTEM privileges. The root cause is ins...

10CVSS7.8AI score0.08717EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/12 12:49 p.m.7 views

CVE-2024-44102

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 6NH9910-0AA31-0AE1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 256 to 1000 V3.1 6NH9910-0AA31-0AD1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 3...

10CVSS0.08717EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/12 12:49 p.m.9 views

CVE-2024-44102

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 6NH9910-0AA31-0AE1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 256 to 1000 V3.1 6NH9910-0AA31-0AD1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 3...

10CVSS7.8AI score0.08717EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.1 views

Siemens PP TeleControl Server 代码问题漏洞

TeleControl Server Basic allows remote monitoring and control of plants via WAN/LAN. A deserialization vulnerability exists in Siemens TeleControl Server Basic, which can be exploited by an attacker to execute arbitrary code on a device with SYSTEM privileges...

10CVSS7.9AI score0.08717EPSS
Exploits0References1
ICS
ICS
added 2024/11/12 12:0 a.m.8 views

Siemens TeleControl Server

SUMMARY TeleControl Server Basic V3.1 contains a deserialization vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the device. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL...

10CVSS7.9AI score0.08717EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2024/08/20 12:0 a.m.2 views

PT-2024-8008 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: PP TeleControl Server Basic versions prior to V3.1.2.1 with redundancy configured TeleControl Server Basic versions prior to V3.1.2.1 with redundancy configured Description: The affected system allows remote users to send maliciously crafted...

10CVSS8.1AI score0.08717EPSS
Exploits0References15
Rows per page
Query Builder