CVE-2025-32841

Summary

CVE-2025-32841 is a newly discovered vulnerability impacting TeleControl Server Basic versions below V3.1.2.2. This issue allows authenticated, remote attackers to bypass authorization controls by exploiting an SQL injection vulnerability in the 'UnlockGateway' method. Successful exploitation enables attackers to read from and write to the application's database and execute code with "NT AUTHORITY\\NetworkService" permissions. To exploit this flaw, an attacker must gain access to port 8000 on a targeted system where a vulnerable version of the application is running.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.