SQL Injection Vulnerability in TeleControl Server Basic by Siemens
CVE-2025-30030
8.8HIGH
What is CVE-2025-30030?
A security vulnerability has been discovered in TeleControl Server Basic, affecting all versions prior to V3.1.2.2. This flaw allows an authenticated remote user to exploit the 'ImportDatabase' method through SQL injection, potentially bypassing authorization controls. The attacker could gain unauthorized access to read and write data to the application's database and execute code with elevated privileges under 'NT AUTHORITY\NetworkService'. Successful exploitation necessitates access to port 8000 on the affected system.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published