TeleControl Server Basic vulnerabilities
70 known vulnerabilities in TeleControl Server Basic from Siemens. 70 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
TeleControl Server Basic: Execution with Unnecessary Privileges
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected application contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges.
- 9.8 Critical severity
TeleControl Server Basic V3.1: Missing Authentication for Critical Functionality
A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetOverview' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'MigrateDatabase' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetTraces' method. This could allow an authenticated remote attacker to bypass autho
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ImportCertificate' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ExportCertificate' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'CreateBackup' method. This could allow an authenticated remote attacker to bypass au
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetLogs' method. This could allow an authenticated remote attacker to bypass authori
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'CreateLog' method. This could allow an authenticated remote attacker to bypass autho
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetSettings' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockTraceLevelSettings' method. This could allow an authenticated remote attacker
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockTraceLevelSettings' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateTraceLevelSettings' method. This could allow an authenticated remote attacker
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockWebServerGatewaySettings' method. This could allow an authenticated remote att
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockWebServerGatewaySettings' method. This could allow an authenticated remote attac
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateWebServerGatewaySettings' method. This could allow an authenticated remote att
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockBufferingSettings' method. This could allow an authenticated remote attacker t
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockBufferingSettings' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockOpcSettings' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockOpcSettings' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockDatabaseSettings' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockDatabaseSettings' method. This could allow an authenticated remote attacker to b
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockTcmSettings' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockTcmSettings' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockSmtpSettings' method. This could allow an authenticated remote attacker to byp
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockSmtpSettings' method. This could allow an authenticated remote attacker to bypas
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockGeneralSettings' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockGeneralSettings' method. This could allow an authenticated remote attacker to by
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateGeneralSettings' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockUser' method. This could allow an authenticated remote attacker to bypass auth
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockUser' method. This could allow an authenticated remote attacker to bypass author
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetUsers' method. This could allow an authenticated remote attacker to bypass author
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockGateway' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockGateway' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetGateways' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ImportConnectionVariables' method. This could allow an authenticated remote attacker
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetActiveConnectionVariables' method. This could allow an authenticated remote attac
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetConnectionVariables' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateConnectionVariableArchivingBuffering' method. This could allow an authenticate