Siemens TeleControl Server Basic SQL
TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to the application's DB, cause denial of service and execute code in an OS shell with limited "NT AUTHORITY\NetworkService" permissions. Siemens has conducted a root-cause analysis for potential SQL injection vulnerabilities and has identified the locations in the code base where the underlying legacy design pattern has been used in. TeleControl Server Basic V3.1.2.2 has fixed all occurrences in the affected product. Siemens has released a new version for TeleControl Server Basic and recommends to update to the latest version.
beschreibt (67)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-32872US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetO… | ||||
| CVE-2025-32871US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Migr… | ||||
| CVE-2025-32870US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetT… | ||||
| CVE-2025-32869US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Impo… | ||||
| CVE-2025-32868US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Expo… | ||||
| CVE-2025-32867US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Crea… | ||||
| CVE-2025-32866US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetL… | ||||
| CVE-2025-32865US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Crea… | ||||
| CVE-2025-32864US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetS… | ||||
| CVE-2025-32863US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
| CVE-2025-32862US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Lock… | ||||
| CVE-2025-32861US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Upda… | ||||
| CVE-2025-32860US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
| CVE-2025-32859US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Lock… | ||||
| CVE-2025-32858US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Upda… | ||||
| CVE-2025-32857US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
| CVE-2025-32856US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Lock… | ||||
| CVE-2025-32855US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
| CVE-2025-32854US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Lock… | ||||
| CVE-2025-32853US | — | — | ||
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Unlo… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-443402: Multiple SQL Injection Vulnerabilities in TeleControl Server Basic before V3.1.2.2 - CSAF Versionself
- SSA-443402: Multiple SQL Injection Vulnerabilities in TeleControl Server Basic before V3.1.2.2 - HTML Versionself
- ICS Advisory ICSA-25-112-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-112-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (134)
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- MitigationTeleControl Server Basic
Restrict access to port 8000 on the affected systems to trusted IP addresses only
- BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/ - BehobenTeleControl Server Basic
Update to V3.1.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987362/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan