CVE-2025-27539

Summary

CVE-2025-27539 is a vulnerability affecting TeleControl Server Basic versions prior to V3.1.2.2. This issue allows unauthenticated attackers, who can access port 8000 on a vulnerable system, to execute SQL injection attacks on the application's 'VerifyUser' method. Successful exploitation lets attackers bypass authorization controls, read from and write to the application's database, and execute code with "NT AUTHORITY\\NetworkService" permissions. This vulnerability poses a significant risk, as it enables unauthorized access and potential data manipulation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.