CVE-2025-31343

Summary

CVE-2025-31343 is a newly identified vulnerability affecting TeleControl Server Basic versions below V3.1.2.2. This issue permits authenticated attackers to execute SQL injection attacks through the 'UpdateTcmSettings' method. By exploiting this vulnerability, attackers can bypass authorization controls, gain unauthorized access to the application's database, and execute code with the "NT AUTHORITY\\NetworkService" permissions. Successful attacks require access to port 8011 on a vulnerable system. This issue could lead to serious data breaches and unauthorized system modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.