CVE-2025-32830

Summary

CVE-2025-32830 is a newly discovered vulnerability affecting TeleControl Server Basic, versions below V3.1.2.2. This issue allows authenticated attackers to execute SQL injections on the application via the 'UnlockProject' method. By exploiting this weakness, an attacker can bypass authorization controls, read and write data in the database, and run code with "NT AUTHORITY\\NetworkService" permissions. Successful attacks require an attacker to have access to port 8000 on a vulnerable system. This vulnerability poses a significant risk, as it enables unauthorized access and data manipulation in the application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.