CVE-2025-32837

Summary

CVE-2025-32837 is a recently discovered vulnerability in TeleControl Server Basic (versions earlier than V3.1.2.2). This application contains an SQL injection vulnerability in its 'GetActiveConnectionVariables' method, which is internally used. With this weakness, an authenticated remote attacker can bypass authorization controls and gain unauthorized access to the application's database, enabling data manipulation and code execution with "NT AUTHORITY\\NetworkService" permissions. For an attack to be successful, the attacker must have access to port 8000 on a system running the vulnerable application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.