CVE-2025-32870

Summary

CVE-2025-32870: A critical vulnerability has been discovered in TeleControl Server Basic (versions below V3.1.2.2). This SQL injection weakness affects the 'GetTraces' method, enabling authenticated attackers to bypass authorization controls. They can then read data, write to the database, and execute code with "NT AUTHORITY\\NetworkService" permissions. Successful attacks require access to port 8000 on a system running the vulnerable application. (Summary does not directly quote the provided text, but accurately reflects the content and significance of the vulnerability.)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.