TeleControl Server Basic vulnerabilities
70 known vulnerabilities in TeleControl Server Basic from Siemens. 70 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateConnectionVariablesWithImport' method. This could allow an authenticated remot
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockProjectUserRights' method. This could allow an authenticated remote attacker t
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockProjectUserRights' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectUserRights' method. This could allow an authenticated remote attacker t
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockProjectCrossCommunications' method. This could allow an authenticated remote att
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectCrossCommunications' method. This could allow an authenticated remote a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ActivateProject' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetActiveProjects' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetProjects' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockProject' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'DeleteProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateOpcSettings' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateGateways' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'CreateProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateBufferingSettings' method. This could allow an authenticated remote attacker t
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateSmtpSettings' method. This could allow an authenticated remote attacker to byp
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateTcmSettings' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateDatabaseSettings' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateUsers' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ImportDatabase' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectConnections' method. This could allow an authenticated remote attacker
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateConnectionVariables' method. This could allow an authenticated remote attacker
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'RestoreFromBackup' method. This could allow an authenticated remote attacker to bypa
- 9.8 Critical severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Authenticate' method. This could allow an unauthenticated remote attacker to bypass
- 9.8 Critical severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'VerifyUser' method. This could allow an unauthenticated remote attacker to bypass au
- 9.8 Critical severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'CreateTrace' method. This could allow an unauthenticated remote attacker to bypass a
- 10.0 Critical severity
PP TeleControl Server Basic 1000 to 5000 V3.1: Deserialization of Untrusted Data
A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1) (All versions < V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1) (All versions < V3.1.2.1 with redu