Siemens TeleControl Server Basic

An attacker with local access to a TeleControl Server Basic system could escalate privileges and run arbitrary code, potentially compromising the entire remote control infrastructure for SCADA networks and critical infrastructure operations.

Water and electric utilities, municipal control centers, and any organization operating SCADA networks that depend on Siemens TeleControl Server Basic for remote terminal operations and supervisory control.

An attacker with a local user account on the TeleControl Server Basic system exploits a privilege escalation flaw (CWE-250) to gain elevated system privileges. Once escalated, the attacker can execute arbitrary code with administrative rights, which could be used to modify control logic, steal credentials, or disrupt remote terminal operations.