High ICSA-18-030-02 3 CVEs

Siemens TeleControl Server Basic

Published Jan 30, 2018 · Updated Jan 30, 2018

Vendor: Siemens Product: TeleControl Server Basic

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 3

Unscored —

CVE-2018-4835

A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleCont…

Siemens TeleControl Server Basic ICS / OT

Jan 25, 2018
Unscored —

CVE-2018-4836

A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged…

Siemens TeleControl Server Basic ICS / OT

Jan 25, 2018
Unscored —

CVE-2018-4837

A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Serv…

Siemens TeleControl Server Basic ICS / OT

Jan 25, 2018

Revision history

2018-01-30 #1
ICSA-18-030-02 Siemens TeleControl Server Basic

References

ICS Advisory ICSA-18-030-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-030-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/