CVE-2024-44102

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Nov 12, 2024
Source updated: Nov 15, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1) (All versions < V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1) (All versions < V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 32 to 64 V3.1 (6NH9910-0AA31-0AF1) (All versions < V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 64 to 256 V3.1 (6NH9910-0AA31-0AC1) (All versions < V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 8 to 32 V3.1 (6NH9910-0AA31-0AB1) (All versions < V3.1.2.1 with redundancy configured), TeleControl Server Basic 1000 V3.1 (6NH9910-0AA31-0AD0) (All versions < V3.1.2.1 with redundancy configured), TeleControl Server Basic 256 V3.1 (6NH9910-0AA31-0AC0) (All versions < V3.1.2.1 with redundancy configured), TeleControl Server Basic 32 V3.1 (6NH9910-0AA31-0AF0) (All versions < V3.1.2.1 with redundancy configured), TeleControl Server Basic 5000 V3.1 (6NH9910-0AA31-0AE0) (All versions < V3.1.2.1 with redundancy configured), TeleControl Server Basic 64 V3.1 (6NH9910-0AA31-0AB0) (All versions < V3.1.2.1 with redundancy configured), TeleControl Server Basic 8 V3.1 (6NH9910-0AA31-0AA0) (All versions < V3.1.2.1 with redundancy configured), TeleControl Server Basic Serv Upgr (6NH9910-0AA31-0GA1) (All versions < V3.1.2.1 with redundancy configured), TeleControl Server Basic Upgr V3.1 (6NH9910-0AA31-0GA0) (All versions < V3.1.2.1 with redundancy configured). The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the affected software, an unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted serialized object. This could allow the attacker to execute arbitrary code on the device with SYSTEM privileges.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

PP TeleControl Server Basic 1000 to 5000 V3.1

Vendor: Siemens
Product: PP TeleControl Server Basic 1000 to 5000 V3.1
Platforms: Unknown
Default status: unknown

PP TeleControl Server Basic 1000 to 5000 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

PP TeleControl Server Basic 256 to 1000 V3.1

Vendor: Siemens
Product: PP TeleControl Server Basic 256 to 1000 V3.1
Platforms: Unknown
Default status: unknown

PP TeleControl Server Basic 256 to 1000 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

PP TeleControl Server Basic 32 to 64 V3.1

Vendor: Siemens
Product: PP TeleControl Server Basic 32 to 64 V3.1
Platforms: Unknown
Default status: unknown

PP TeleControl Server Basic 32 to 64 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

PP TeleControl Server Basic 64 to 256 V3.1

Vendor: Siemens
Product: PP TeleControl Server Basic 64 to 256 V3.1
Platforms: Unknown
Default status: unknown

PP TeleControl Server Basic 64 to 256 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

PP TeleControl Server Basic 8 to 32 V3.1

Vendor: Siemens
Product: PP TeleControl Server Basic 8 to 32 V3.1
Platforms: Unknown
Default status: unknown

PP TeleControl Server Basic 8 to 32 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

TeleControl Server Basic 1000 V3.1

Vendor: Siemens
Product: TeleControl Server Basic 1000 V3.1
Platforms: Unknown
Default status: unknown

TeleControl Server Basic 1000 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

TeleControl Server Basic 256 V3.1

Vendor: Siemens
Product: TeleControl Server Basic 256 V3.1
Platforms: Unknown
Default status: unknown

TeleControl Server Basic 256 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

TeleControl Server Basic 32 V3.1

Vendor: Siemens
Product: TeleControl Server Basic 32 V3.1
Platforms: Unknown
Default status: unknown

TeleControl Server Basic 32 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

TeleControl Server Basic 5000 V3.1

Vendor: Siemens
Product: TeleControl Server Basic 5000 V3.1
Platforms: Unknown
Default status: unknown

TeleControl Server Basic 5000 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

TeleControl Server Basic 64 V3.1

Vendor: Siemens
Product: TeleControl Server Basic 64 V3.1
Platforms: Unknown
Default status: unknown

TeleControl Server Basic 64 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

TeleControl Server Basic 8 V3.1

Vendor: Siemens
Product: TeleControl Server Basic 8 V3.1
Platforms: Unknown
Default status: unknown

TeleControl Server Basic 8 V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

TeleControl Server Basic Serv Upgr

Vendor: Siemens
Product: TeleControl Server Basic Serv Upgr
Platforms: Unknown
Default status: unknown

TeleControl Server Basic Serv Upgr · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed

TeleControl Server Basic Upgr V3.1

Vendor: Siemens
Product: TeleControl Server Basic Upgr V3.1
Platforms: Unknown
Default status: unknown

TeleControl Server Basic Upgr V3.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.1.2.1	Unavailable	None listed