CVE-2025-32862

Summary

CVE-2025-32862 is a newly identified vulnerability that affects TeleControl Server Basic, with all versions below V3.1.2.2 being vulnerable. This issue allows authenticated remote attackers to bypass authorization controls by exploiting an SQL injection vulnerability in the 'LockTraceLevelSettings' method. Successful attacks require access to port 8000 on a system where the vulnerable application is installed, enabling attackers to read from and write to the application's database and execute code with "NT AUTHORITY\\NetworkService" permissions. This vulnerability poses a significant risk and necessitates immediate mitigation efforts for affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.