CVE-2018-4836

2018-01-2514:00:00

CWE-287

siemens

www.cve.org

AI Score

8.6

Confidence

High

EPSS

0.002

Percentile

58.8%

JSON

A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic’s port 8000/tcp could escalate his privileges and perform administrative operations.

CNA Affected

[
  {
    "product": "TeleControl Server Basic",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.1"
      }
    ]
  }
]