SQL Injection Vulnerability in TeleControl Server Basic by Siemens

CVE-2025-32823

Summary

A security flaw has been discovered in TeleControl Server Basic, where the internally utilized 'LockProject' method is susceptible to SQL injection. This vulnerability enables an authenticated remote attacker to circumvent authorization mechanisms, allowing unauthorized access to the application’s database where they can read, write data, and execute commands with elevated permissions under 'NT AUTHORITY\NetworkService'. Exploitation of this vulnerability requires the attacker to access port 8000 on a system running the vulnerable application.

References