CVE-2025-32838

Summary

CVE-2025-32838 is a newly discovered vulnerability affecting TeleControl Server Basic versions prior to V3.1.2.2. This issue enables an authenticated attacker to execute SQL injection attacks on the application through its 'ImportConnectionVariables' method. The consequence of this vulnerability is the bypassing of authorization controls, allowing the attacker to read and write data from the application's database and execute code with "NT AUTHORITY\\NetworkService" permissions. Successful exploitation of this vulnerability necessitates access to port 8000 on a system running the susceptible version of the application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.