CVE-2025-32853

Summary

CVE-2025-32853 is a newly disclosed vulnerability affecting TeleControl Server Basic (versions prior to V3.1.2.2). This issue allows authenticated, remote attackers to manipulate SQL queries through the application's 'UnlockDatabaseSettings' method. By doing so, they can bypass authorization controls, gain unauthorized access to the application's database, and execute code with the NT AUTHORITY\NetworkService permissions. Successful exploitation requires the attacker to have access to port 8000 on a target system with a vulnerable instance of the application running.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.