ID
VAR-202504-1195
CVE
CVE-2025-29931
TITLE
Siemens' telecontrol server basic Processing vulnerability due to inconsistent length parameter in
Trust: 0.8
DESCRIPTION
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected product does not properly validate a length field in a serialized message which it uses to determine the amount of memory to be allocated for deserialization. This could allow an unauthenticated remote attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a partial denial of service condition. Successful exploitation is only possible in redundant Telecontrol Server Basic setups and only if the connection between the redundant servers has been disrupted. Siemens' telecontrol server basic contains a processing vulnerability due to inconsistent length parameters.Service operation interruption (DoS) It may be in a state. TeleControl Server Basic is a server software for remote monitoring and control, widely used in the field of industrial automation
Trust: 2.16
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | siemens | model: | telecontrol server basic | scope: | lt | version: | 3.1.2.2 | Trust: 1.0 |
| vendor: | シーメンス | model: | telecontrol server basic | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | シーメンス | model: | telecontrol server basic | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シーメンス | model: | telecontrol server basic | scope: | eq | version: | 3.1.2.2 | Trust: 0.8 |
| vendor: | siemens | model: | telecontrol server basic | scope: | lt | version: | v3.1.2.2 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-130 | Trust: 1.0 |
| problemtype: | Improper handling due to inconsistent length parameters (CWE-130) [ others ] | Trust: 0.8 |
PATCH
| title: | Patch for Siemens TeleControl Server Basic Denial of Service Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/686151 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-29931 | Trust: 3.2 |
| db: | SIEMENS | id: | SSA-395348 | Trust: 2.4 |
| db: | JVN | id: | JVNVU90506697 | Trust: 0.8 |
| db: | ICS CERT | id: | ICSA-25-112-02 | Trust: 0.8 |
| db: | JVNDB | id: | JVNDB-2025-011800 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-08973 | Trust: 0.6 |
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-395348.html | Trust: 2.4 |
| url: | https://jvn.jp/vu/jvnvu90506697/ | Trust: 0.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-29931 | Trust: 0.8 |
| url: | https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-02 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2025-08973 |
| db: | JVNDB | id: | JVNDB-2025-011800 |
| db: | NVD | id: | CVE-2025-29931 |
LAST UPDATE DATE
2025-08-23T20:03:45.306000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-08973 | date: | 2025-05-06T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-011800 | date: | 2025-08-20T06:02:00 |
| db: | NVD | id: | CVE-2025-29931 | date: | 2025-08-19T14:48:34.130 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-08973 | date: | 2025-04-17T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-011800 | date: | 2025-08-20T00:00:00 |
| db: | NVD | id: | CVE-2025-29931 | date: | 2025-04-17T11:15:47.807 |