Local Privilege Escalation Vulnerability in TeleControl Server Basic Before V3.1.2.4

An attacker with a local user account on the TeleControl Server could elevate privileges to run arbitrary code, potentially gaining control of the server and any connected systems it manages.

Any organization using Siemens TeleControl Server Basic to manage remote telecontrol and SCADA infrastructure should apply this update. This affects power utilities, water authorities, and other critical infrastructure operators who rely on TeleControl Server for remote device management and monitoring.

An attacker with valid local credentials on a TeleControl Server can exploit the privilege escalation vulnerability to run commands with elevated system privileges, gaining the ability to modify system configuration, access sensitive data, or control connected field devices.