CVE-2025-32855

Summary

CVE-2025-32855 is a newly discovered vulnerability affecting TeleControl Server Basic (versions below V3.1.2.2). This issue enables an authenticated attacker to perform SQL injection attacks on the 'UnlockOpcSettings' method. By exploiting this vulnerability, the attacker can bypass authorization controls, gain access to the application's database, and execute code with the privileged "NT AUTHORITY\NetworkService" permissions. To successfully exploit the vulnerability, an attacker must have the ability to connect to the affected system on port 8000.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.