CVE-2025-32868

Summary

CVE-2025-32868 is a newly identified vulnerability affecting TeleControl Server Basic versions below V3.1.2.2. The issue lies in the 'ExportCertificate' method, which is susceptible to SQL injection attacks. An authenticated remote attacker can exploit this vulnerability to bypass authorization controls, gain read and write access to the application's database, and execute code with "NT AUTHORITY\\NetworkService" permissions. For an attack to be successful, the attacker must have access to port 8000 on a system where the vulnerable application is running.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.