Siemens TeleControl Server Basic

Source: All CISA Advisories | Added:

Siemens TeleControl Server Basic has a critical vulnerability that allows unauthenticated remote attackers to obtain user password hashes and perform authenticated operations on the database service. The vulnerability, identified as CVE-2025-40765, has a high CVSS score indicating significant risk.

---

Impact: Siemens TeleControl Server Basic V3.1: Version V3.1.2.2 and up to but not including V3.1.2.3

In the Wild: No

Age: Newly disclosed

Remediation: Restrict access to port 8000 to trusted IP addresses and update to V3.1.2.3 or later version.

Read Full Original Article →