CVE-2025-32829

Summary

CVE-2025-32829 is a newly discovered vulnerability affecting TeleControl Server Basic (versions prior to V3.1.2.2). This issue allows authenticated, remote attackers to execute SQL injections via the 'LockProjectCrossCommunications' method. By exploiting this weakness, attackers can bypass authorization controls, gain access to the application's database, and execute code with "NT AUTHORITY\\NetworkService" permissions. To successfully exploit this vulnerability, the attacker must have the ability to connect to port 8000 on a targeted system running the vulnerable application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.