CVE-2018-4837

HIGH

TeleControl Server Basic < 3.1 - Denial of Service via Web Server

Title source: llm

Description

A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected by the Denial-of-Service condition.

References (3)

Core 3

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102819

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102904

Scores

CVSS v3 7.5

EPSS 0.0148

EPSS Percentile 81.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-400

Status published

Products (1)

siemens/telecontrol_server_basic < 3.1

Published Jan 25, 2018

Tracked Since Feb 18, 2026