CVE-2025-30003

Summary

CVE-2025-30003 is a recently disclosed vulnerability affecting TeleControl Server Basic versions below V3.1.2.2. This issue permits authenticated remote attackers to perform SQL injection attacks via the 'UpdateProjectConnections' method. The exploitation of this vulnerability allows bypassing authorization controls, reading and writing data to the application's database, and executing code with "NT AUTHORITY\\NetworkService" privileges. The attacker must have access to port 8000 on a vulnerable system to successfully carry out the attack. This vulnerability poses a significant risk, requiring prompt remediation to prevent unauthorized access and potential data compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.