CVE-2025-32835

Summary

CVE-2025-32835 is a newly identified vulnerability affecting TeleControl Server Basic versions below V3.1.2.2. This issue allows authenticated remote attackers to bypass authorization controls and gain unauthorized access to the application's database. The vulnerability is due to SQL injection vulnerabilities in the 'UpdateConnectionVariableArchivingBuffering' method. Successful exploitation requires access to port 8000 on a system where the vulnerable application is executed. Attackers could read sensitive data and execute code with "NT AUTHORITY\\NetworkService" permissions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.