CVE-2025-31352

Summary

CVE-2025-31352 is a newly discovered vulnerability that affects TeleControl Server Basic versions prior to V3.1.2.2. This issue enables authenticated remote attackers to bypass authorization controls by exploiting an SQL injection vulnerability in the 'UpdateGateways' method. Successful exploitation allows attackers to read from and write to the application's database and execute code with the permissions of "NT AUTHORITY\\NetworkService". To exploit this vulnerability, an attacker must have access to port 8000 on a target system where a susceptible version of the application is in operation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.