CVE-2025-31349

CVE-2025-31349 affects Siemens TeleControl Server Basic (versions before 3.1.2.2). The issue is a SQL injection in the internal UpdateSmtpSettings method that can bypass authorization, allowing an authenticated remote attacker to read/write the database and execute code with NT AUTHORITY\NetworkS...