CVE-2025-40942

High

Published: 13/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

A local privilege escalation vulnerability has been identified in TeleControl Server Basic (all versions before V3.1.2.4). This could allow an attacker to run arbitrary code with elevated privileges.

Risk Assessment

An attacker with local access can gain administrator privileges, leading to full compromise of the system and data.

Recommendation

It is recommended to update TeleControl Server Basic to version V3.1.2.4 or later, which includes the fix.

Other vulnerabilities in TeleControl Server Basic

CVE-2025-40765Critical
A vulnerability has been identified in TeleControl Server Basic V3.1 (all versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability that could allow an unauthenticated remote attacker to obtain password hashes of users and to log in and perform authenticated operations of the database service.

Original NVD description (English source)

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected application contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS