CVE-2025-32823

Summary

CVE-2025-32823 is a newly discovered vulnerability that affects TeleControl Server Basic versions below V3.1.2.2. The issue lies in the 'LockProject' method, which is susceptible to SQL injection attacks. An authenticated remote attacker can exploit this vulnerability to bypass authorization controls and gain unauthorized access to the application's database. They can read sensitive data, write malicious code, and execute it with "NT AUTHORITY\\NetworkService" permissions. To take advantage of this vulnerability, an attacker must have network access to a system running the affected application and be able to connect to its port 8000.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.