Siemens TeleControl Server
TeleControl Server Basic V3.1 contains a deserialization vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-44102US | — | — | ||
A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1) (All versions < V3.1.2.1 with redundancy configured), PP TeleControl Serve… | ||||
references
External citations — patches, advisories, analysis.
- SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1 - CSAF Versionself
- SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1 - HTML Versionself
- ICS Advisory ICSA-24-319-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-319-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (26)
- MitigationPP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1)
Disable redundancy, if not used
- MitigationPP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1)
Disable redundancy, if not used
- MitigationPP TeleControl Server Basic 32 to 64 V3.1 (6NH9910-0AA31-0AF1)
Disable redundancy, if not used
- MitigationPP TeleControl Server Basic 64 to 256 V3.1 (6NH9910-0AA31-0AC1)
Disable redundancy, if not used
- MitigationPP TeleControl Server Basic 8 to 32 V3.1 (6NH9910-0AA31-0AB1)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 1000 V3.1 (6NH9910-0AA31-0AD0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 256 V3.1 (6NH9910-0AA31-0AC0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 32 V3.1 (6NH9910-0AA31-0AF0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 5000 V3.1 (6NH9910-0AA31-0AE0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 64 V3.1 (6NH9910-0AA31-0AB0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 8 V3.1 (6NH9910-0AA31-0AA0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic Serv Upgr (6NH9910-0AA31-0GA1)
Disable redundancy, if not used
- MitigationTeleControl Server Basic Upgr V3.1 (6NH9910-0AA31-0GA0)
Disable redundancy, if not used
- FixedPP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedPP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedPP TeleControl Server Basic 32 to 64 V3.1 (6NH9910-0AA31-0AF1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedPP TeleControl Server Basic 64 to 256 V3.1 (6NH9910-0AA31-0AC1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedPP TeleControl Server Basic 8 to 32 V3.1 (6NH9910-0AA31-0AB1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedTeleControl Server Basic 1000 V3.1 (6NH9910-0AA31-0AD0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedTeleControl Server Basic 256 V3.1 (6NH9910-0AA31-0AC0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedTeleControl Server Basic 32 V3.1 (6NH9910-0AA31-0AF0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedTeleControl Server Basic 5000 V3.1 (6NH9910-0AA31-0AE0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedTeleControl Server Basic 64 V3.1 (6NH9910-0AA31-0AB0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedTeleControl Server Basic 8 V3.1 (6NH9910-0AA31-0AA0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedTeleControl Server Basic Serv Upgr (6NH9910-0AA31-0GA1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - FixedTeleControl Server Basic Upgr V3.1 (6NH9910-0AA31-0GA0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan