CVE-2025-29931
CVSS 3.1 Score 3.7 of 10 (low)
Details
Published Apr 17, 2025
CWE ID 130
Summary
CVE-2025-29931 is a vulnerability affecting TeleControl Server Basic versions below V3.1.2.2. The issue arises from the product's failure to properly validate a length field in a deserialization process. An unauthenticated remote attacker can exploit this flaw by manipulating the length field to exhaustively allocate memory, leading to a partial denial of service condition. This vulnerability can only be exploited in redundant Telecontrol Server Basic installations, and only if the connection between the redundant servers has been disrupted.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Siemens Telecontrol Server Basic
Affected Vendors
- Siemens