Skip to content
OpenAdvisories
Critical SSA-454789 1 CVE

SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1

Published Nov 12, 2024 · Updated Nov 12, 2024

Vendor: Siemens Product: PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1) Product: PP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1) Product: PP TeleControl Server Basic 32 to 64 V3.1 (6NH9910-0AA31-0AF1) Product: PP TeleControl Server Basic 64 to 256 V3.1 (6NH9910-0AA31-0AC1) Product: PP TeleControl Server Basic 8 to 32 V3.1 (6NH9910-0AA31-0AB1) Product: TeleControl Server Basic 1000 V3.1 (6NH9910-0AA31-0AD0) Product: TeleControl Server Basic 256 V3.1 (6NH9910-0AA31-0AC0) Product: TeleControl Server Basic 32 V3.1 (6NH9910-0AA31-0AF0) Product: TeleControl Server Basic 5000 V3.1 (6NH9910-0AA31-0AE0) Product: TeleControl Server Basic 64 V3.1 (6NH9910-0AA31-0AB0) Product: TeleControl Server Basic 8 V3.1 (6NH9910-0AA31-0AA0) Product: TeleControl Server Basic Serv Upgr (6NH9910-0AA31-0GA1) Product: TeleControl Server Basic Upgr V3.1 (6NH9910-0AA31-0GA0)

Summary

TeleControl Server Basic V3.1 contains a deserialization vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the device.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References