TELESCO ASSOCIATES, INC.
Last Update: 2025-03-05 (UTC)
Between 800 and 900
Strong
None
NAICS: 5112
NAICS Definition: Software Publishers
Employees: 1
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Comparison Overview
TELESCO ASSOCIATES, INC.
VS
CRIS; A Autonomous Society under the Ministry of Indian Railways
CRIS; A Autonomous Society under the Ministry of Indian Railways
Last Update: 2025-03-14 (UTC)
Excellent
Between 900 and 1000
Ministry of Railways established the CENTRE FOR RAILWAY INFORMATION SYSTEMS (CRIS), Chanakya Puri, New Delhi - 21 to be an umbrella organisation for all computer activities on Indian Railways (IR).They also entrusted it with the task of design, development and implementation of the FOIS, alongwith its associated communications infrastructure. The Centre started functioning from July,1987.It is a registered society having an autonomous status and headed by Managing Director .CRIS is mainly a project oriented organisation engaged in development of major computer systems on the Railways.
NAICS: 511
NAICS Definition:
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Compliance Badges Comparison
Security & Compliance Standards Overview
TELESCO ASSOCIATES, INC.
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
CRIS; A Autonomous Society under the Ministry of Indian Railways
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
Compliance Summary
TELESCO ASSOCIATES, INC.
100%
Compliance Rate
0/4 Standards Verified
CRIS; A Autonomous Society under the Ministry of Indian Railways
0%
Compliance Rate
0/4 Standards Verified
Benchmark & Cyber Underwriting Signals
Incidents vs Software Development Industry Average (This Year)
No incidents recorded for TELESCO ASSOCIATES, INC. in 2025.
Incidents vs Software Development Industry Average (This Year)
No incidents recorded for CRIS; A Autonomous Society under the Ministry of Indian Railways in 2025.
Incident History — TELESCO ASSOCIATES, INC. (X = Date, Y = Severity)
TELESCO ASSOCIATES, INC. cyber incidents detection timeline including parent company and subsidiaries
Incident History — CRIS; A Autonomous Society under the Ministry of Indian Railways (X = Date, Y = Severity)
CRIS; A Autonomous Society under the Ministry of Indian Railways cyber incidents detection timeline including parent company and subsidiaries
Notable Incidents
Last 3 Security & Risk Events by Company
TELESCO ASSOCIATES, INC.
Incidents
No Incident
CRIS; A Autonomous Society under the Ministry of Indian Railways
Incidents
No Incident
FAQ
CRIS; A Autonomous Society under the Ministry of Indian Railways company company demonstrates a stronger AI risk posture compared to TELESCO ASSOCIATES, INC. company company, reflecting its advanced AI governance and monitoring frameworks.
Historically, CRIS; A Autonomous Society under the Ministry of Indian Railways company has disclosed a higher number of cyber incidents compared to TELESCO ASSOCIATES, INC. company.
In the current year, CRIS; A Autonomous Society under the Ministry of Indian Railways company and TELESCO ASSOCIATES, INC. company have not reported any cyber incidents.
Neither CRIS; A Autonomous Society under the Ministry of Indian Railways company nor TELESCO ASSOCIATES, INC. company has reported experiencing a ransomware attack publicly.
Neither CRIS; A Autonomous Society under the Ministry of Indian Railways company nor TELESCO ASSOCIATES, INC. company has reported experiencing a data breach publicly.
Neither CRIS; A Autonomous Society under the Ministry of Indian Railways company nor TELESCO ASSOCIATES, INC. company has reported experiencing targeted cyberattacks publicly.
Neither TELESCO ASSOCIATES, INC. company nor CRIS; A Autonomous Society under the Ministry of Indian Railways company has reported experiencing or disclosing vulnerabilities publicly.
Neither TELESCO ASSOCIATES, INC. company nor CRIS; A Autonomous Society under the Ministry of Indian Railways company has publicly disclosed detailed information about the number of their subsidiaries.
TELESCO ASSOCIATES, INC. company employs more people globally than CRIS; A Autonomous Society under the Ministry of Indian Railways company, reflecting its scale as a Software Development.
Latest Global CVEs (Not Company-Specific)
Description
Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent path traversal for reading file contents, but this check is effectively bypassed by subsequent logic that attempts to find directory suggestions. An attacker can leverage this flaw to list the contents of arbitrary directories on the user's filesystem, including the user's home directory, exposing sensitive information about the file system's structure. This issue is fixed in version 0.13.20.
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and extension whitelist restrictions, allowing attackers to upload SVG files containing malicious scripts (disguised as images). When users access the uploaded resource pages, arbitrary JavaScript executes in their browsers. This issue is fixed in version 1.3.14.
Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0.
Risk Information
cvss4
Base: 6.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Anyquery is an SQL query engine built on top of SQLite. Versions 0.4.3 and below allow attackers who have already gained access to localhost, even with low privileges, to use the http server through the port unauthenticated, and access private integration data like emails, without any warning of a foreign login from the provider. This issue is fixed in version 0.4.4.
Risk Information
cvss3
Base: 7.7
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables (such as DATACHAIN__METASTORE and DATACHAIN__WAREHOUSE) in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads. This issue is fixed in version 0.34.2.
Risk Information
cvss3
Base: 2.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
