Summary
TeleControl Server Basic V3.1 contains an information disclosure vulnerability that could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.
Siemens has released a new version for TeleControl Server Basic V3.1 and recommends to update to the latest version.
Vulnerabilities 1
-
Critical 9.8
A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affecte…
Revision history
-
#1
Publication Date
References
-
SSA-062309: Information Disclosure Vulnerability in TeleControl Server Basic V3.1 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-062309.html