SSA-443402: Multiple SQL Injection Vulnerabilities in TeleControl Server Basic before V3.1.2.2
TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to the application's DB, cause denial of service and execute code in an OS shell with limited "NT AUTHORITY\NetworkService" permissions. Siemens has conducted a root-cause analysis for potential SQL injection vulnerabilities and has identified the locations in the code base where the underlying legacy design pattern has been used in. TeleControl Server Basic V3.1.2.2 has fixed all occurrences in the affected product. Siemens has released a new version for TeleControl Server Basic and recommends to update to the latest version.
describes (67)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-32872US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetO… | ||||
| CVE-2025-32871US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Migr… | ||||
| CVE-2025-32870US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetT… | ||||
| CVE-2025-32869US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Impo… | ||||
| CVE-2025-32868US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Expo… | ||||
| CVE-2025-32867US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Crea… | ||||
| CVE-2025-32866US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetL… | ||||
| CVE-2025-32865US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Crea… | ||||
| CVE-2025-32864US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetS… | ||||
| CVE-2025-32863US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
| CVE-2025-32862US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Lock… | ||||
| CVE-2025-32861US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Upda… | ||||
| CVE-2025-32860US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
| CVE-2025-32859US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Lock… | ||||
| CVE-2025-32858US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Upda… | ||||
| CVE-2025-32857US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
| CVE-2025-32856US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Lock… | ||||
| CVE-2025-32855US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
| CVE-2025-32854US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Lock… | ||||
| CVE-2025-32853US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
references
External citations — patches, advisories, analysis.
remediations (134)
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - FixedTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan