CVE-2025-32851

Summary

CVE-2025-32851 is a newly discovered vulnerability affecting TeleControl Server Basic versions prior to V3.1.2.2. This issue grants authenticated remote attackers the ability to bypass authorization controls through SQL injection, which in turn allows them to read and write data to the application's database and execute code with "NT AUTHORITY\\NetworkService" permissions. The attacker must have access to port 8000 on the targeted system to exploit this vulnerability. By exploiting this weakness, an attacker could gain unauthorized access to sensitive information and potentially take control of the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.