CVE-2025-32858

Summary

CVE-2025-32858 is a new vulnerability affecting TeleControl Server Basic, where all versions below V3.1.2.2 are impacted. The issue lies in the application's 'UpdateWebServerGatewaySettings' method, which is susceptible to SQL injection attacks. An authenticated remote attacker can exploit this flaw to bypass authorization controls and gain access to the application's database. Furthermore, they can manipulate data and execute code with the permissions of "NT AUTHORITY\\NetworkService". To successfully launch an attack, an attacker must have the ability to reach port 8000 on a vulnerable system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.