Siemens TeleControl Server Basic
ATTENTION: Remotely exploitable/low skill level to exploit.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-4837US | high7.5 | — | ||
A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a D… | ||||
| CVE-2018-4836US | high8.8 | — | ||
A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp coul… | ||||
| CVE-2018-4835US | medium5.3OT erhöht | — | ||
A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleControl Server Basic's port 8000/tcp could bypass the authenticat… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationTeleControl Server Basic
If TeleControl Server Basic is operated in redundancy mode, then users can use the Windows firewall to restrict access to Port 8000/TCP to the second TeleControl Server Basics' IP address to mitigate vulnerabilities CVE-2018-4835 and CVE-2018-4836.
- MitigationTeleControl Server Basic
If TeleControl Server Basic is operated in redundancy mode, then users can use the Windows firewall to restrict access to Port 8000/TCP to the second TeleControl Server Basics' IP address to mitigate vulnerabilities CVE-2018-4835 and CVE-2018-4836.
- MitigationTeleControl Server Basic
If TeleControl Server Basic is operated in redundancy mode, then users can use the Windows firewall to restrict access to Port 8000/TCP to the second TeleControl Server Basics' IP address to mitigate vulnerabilities CVE-2018-4835 and CVE-2018-4836.
- BehobenTeleControl Server Basic
For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-65145.
http://www.siemens.com/cert/en/cert-security-advisories.htm - BehobenTeleControl Server Basic
For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-65145.
http://www.siemens.com/cert/en/cert-security-advisories.htm - BehobenTeleControl Server Basic
For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-65145.
http://www.siemens.com/cert/en/cert-security-advisories.htm
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan