CVE-2018-4837

The connected sources confirm CVE-2018-4837 affects Siemens TeleControl Server Basic versions prior to 3.1, where a vulnerability in the webserver (ports 80/443) can cause a Denial-of-Service without affecting other functionality. The ICSA advisory reiterates this as a DoS risk via the webserver,...

CVE-2018-4835

A vulnerability has been identified in TeleControl Server Basic V3.1. An attacker with network access to the TeleControl Server Basic's port 8000/tcp could bypass the authentication mechanism and read limited information...

CVE-2018-4837

A vulnerability has been identified in TeleControl Server Basic V3.1. An attacker with access to the TeleControl Server Basic's webserver port 80/tcp or 443/tcp could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected...

PT-2018-16560

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to V3.1 Description A vulnerability has been identified that allows an attacker with network access to the TeleControl Server Basic's port 8000/tcp to bypass the authentication mechanism and read limited...

PT-2018-16561

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to V3.1 Description A vulnerability has been identified that allows an authenticated attacker with a low-privileged account to escalate privileges and perform administrative operations on the TeleControl...

CVE-2018-4836: Improper Authentication

A vulnerability has been identified in TeleControl Server Basic V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations...

CVE-2018-4837: Uncontrolled Resource Consumption

A vulnerability has been identified in TeleControl Server Basic V3.1. An attacker with access to the TeleControl Server Basic's webserver port 80/tcp or 443/tcp could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected...

CVE-2018-4835: Improper Authentication

A vulnerability has been identified in TeleControl Server Basic V3.1. An attacker with network access to the TeleControl Server Basic's port 8000/tcp could bypass the authentication mechanism and read limited information...

PT-2018-16562

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to V3.1 Description A Denial-of-Service condition can be caused on the web server of the TeleControl Server Basic by an attacker with access to the webserver, affecting port 80/tcp or 443/tcp. The...