CVE-2025-32833

Summary

CVE-2025-32833 is a newly identified vulnerability affecting TeleControl Server Basic versions prior to V3.1.2.2. The issue lies in the 'UnlockProjectUserRights' method, which is susceptible to SQL injection attacks. An attacker, once authenticated, can exploit this vulnerability to bypass authorization controls and gain unauthorized access to the application's database. This could potentially enable reading and writing of data, as well as code execution with "NT AUTHORITY\\NetworkService" permissions. For an attack to be successful, the attacker must be able to connect to the affected system through port 8000.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.