Known vulnerabilities in TeleControl Server Basic

Vendor: Siemens
Software: TeleControl Server Basic
Software CPE: cpe:2.3:a:siemens:telecontrol_server_basic:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 121
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeleControl Server Basic TeleControl Server Basic is affected by 121 known vulnerabilities: 28 high, 83 medium, 10 low Critical High Medium Low

Vulnerabilities (121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117620 - Missing Authentication for Critical Function
CVE-2025-40765		 CWE-306 High
No
No
 3.1.2.3 23.10.2025 SB20251023101
#VU116445 - Improper Handling of Length Parameter Inconsistency
CVE-2025-29931		 CWE-130 Medium
No
No
 3.1.2.2 03.10.2025 SB2025100349
#VU111331 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32852		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111332 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32853		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111333 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32854		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111334 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32855		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111335 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32856		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111336 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32857		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111337 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32858		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111328 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32851		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111323 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32850		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111319 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32849		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111315 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32848		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111310 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32847		 CWE-89 Medium
No
No
 3.1.2.2 19.06.2025 SB2025061960
#VU111267 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32846		 CWE-89 Medium
No
No
 3.1.2.2 18.06.2025 SB2025061960
#VU111264 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32845		 CWE-89 Medium
No
No
 3.1.2.2 18.06.2025 SB2025061960
#VU111263 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32844		 CWE-89 Medium
No
No
 3.1.2.2 18.06.2025 SB2025061960
#VU111262 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32843		 CWE-89 Medium
No
No
 3.1.2.2 18.06.2025 SB2025061960
#VU111261 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32842		 CWE-89 Medium
No
No
 3.1.2.2 18.06.2025 SB2025061960
#VU111259 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32840		 CWE-89 Medium
No
No
 3.1.2.2 18.06.2025 SB2025061960


Showing elements 1 - 20 out of 121