CVE-2025-32871

Summary

CVE-2025-32871 is a newly disclosed vulnerability in TeleControl Server Basic (versions before V3.1.2.2). This issue exposes SQL injection vulnerabilities in the 'MigrateDatabase' method, which can be exploited by authenticated remote attackers. By successfully manipulating SQL queries, attackers can bypass authorization controls and gain unrestricted access to the application's database, allowing them to read sensitive data and execute code with "NT AUTHORITY\\NetworkService" permissions. To exploit this vulnerability, an attacker must have access to port 8000 on a system where the vulnerable version of the application is installed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.