CVE-2025-40942: Siemens Telecontrol Server Basic

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected application contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges.

Affected products

• Siemens Telecontrol Server Basic: before 3.1.2.4 (fixed in 3.1.2.4)

Published 2026-01-13. Last modified 2026-06-17.