Vulnerability in Siemens Telecontrol Server Basic
CVE-2025-29931
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected product does not properly validate a length field in a serialized message which it uses to determine the amount of memory to be allocated for deserialization. This could allow an unauthenticated remote attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a partial denial of service condition. Successful exploitation is only possible in redundant Telecontrol Server Basic setups and only if the connection between the redundant servers has been disrupted.
EPSS: 0.004 (34.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- productcert@siemens.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-29931?
- CVE-2025-29931 is a low-severity vulnerability in Siemens Telecontrol Server Basic, classified under Improper Handling of Length Parameter Inconsistency. CVSS score: 3.7/10. Published 2025-04-17.
- How severe is CVE-2025-29931?
- Low severity. CVSS v3 base score is 3.7 out of 10.
- Is CVE-2025-29931 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.