Siemens TeleControl Server Basic
ATTENTION: Remotely exploitable/low skill level to exploit.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-4837US | high7.5 | — | ||
A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a D… | ||||
| CVE-2018-4836US | high8.8 | — | ||
A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp coul… | ||||
| CVE-2018-4835US | medium5.3OT elevated | — | ||
A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleControl Server Basic's port 8000/tcp could bypass the authenticat… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationTeleControl Server Basic
If TeleControl Server Basic is operated in redundancy mode, then users can use the Windows firewall to restrict access to Port 8000/TCP to the second TeleControl Server Basics' IP address to mitigate vulnerabilities CVE-2018-4835 and CVE-2018-4836.
- MitigationTeleControl Server Basic
If TeleControl Server Basic is operated in redundancy mode, then users can use the Windows firewall to restrict access to Port 8000/TCP to the second TeleControl Server Basics' IP address to mitigate vulnerabilities CVE-2018-4835 and CVE-2018-4836.
- MitigationTeleControl Server Basic
If TeleControl Server Basic is operated in redundancy mode, then users can use the Windows firewall to restrict access to Port 8000/TCP to the second TeleControl Server Basics' IP address to mitigate vulnerabilities CVE-2018-4835 and CVE-2018-4836.
- FixedTeleControl Server Basic
For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-65145.
http://www.siemens.com/cert/en/cert-security-advisories.htm - FixedTeleControl Server Basic
For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-65145.
http://www.siemens.com/cert/en/cert-security-advisories.htm - FixedTeleControl Server Basic
For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-65145.
http://www.siemens.com/cert/en/cert-security-advisories.htm
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan