Local Privilege Escalation Vulnerability in TeleControl Server Basic by Siemens
CVE-2025-40942

7.3HIGH

Key Information:

Vendor

Siemens
Status
Telecontrol Server Basic
Vendor
CVE Published:
13 January 2026

What is CVE-2025-40942?

A local privilege escalation vulnerability has been identified in Siemens' TeleControl Server Basic, affecting all versions prior to 3.1.2.4. This flaw can enable attackers to execute arbitrary code with elevated privileges, potentially compromising the integrity and security of the system. Users are advised to update to the latest version to mitigate the risk associated with this vulnerability.

Affected Version(s)

TeleControl Server Basic 0

References

https://cert-portal.siemens.com/productcert/html/ssa-1926...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.