CVE-2025-32863

Summary

CVE-2025-32863 is a vulnerability affecting TeleControl Server Basic (versions prior to V3.1.2.2). This issue allows authenticated attackers to perform SQL injection attacks on the application's internal 'UnlockTraceLevelSettings' method. Successful exploitation enables bypassing authorization controls, granting attackers access to read and write data in the application's database and execute code using "NT AUTHORITY\\NetworkService" permissions. To exploit this vulnerability, an attacker must be able to connect to port 8000 on a target system running a susceptible version of the application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.