Siemens TeleControl Server Basic

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: TeleControl Server Basic Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Permissions, Privileges, and Access Controls, Resource Exhaustion AFFECTED PRODUCTS The following...

CVE-2018-4836

CVE-2018-4836 affects Siemens TeleControl Server Basic prior to v3.1. An authenticated attacker with a low-privilege account on port 8000/TCP could escalate privileges and perform administrative operations. The ICS/CERT advisory notes remediation via upgrading to TeleControl Server Basic v3.1 or ...