SQL Injection Vulnerability in TeleControl Server Basic by Siemens

CVE-2025-32851

Summary

A security vulnerability exists in the TeleControl Server Basic that enables SQL injection through the 'UnlockTcmSettings' method in versions prior to V3.1.2.2. This flaw allows an authenticated remote attacker to bypass authorization mechanisms, granting them access to read from and write to the application's database. Furthermore, the attacker can execute code with the permissions of 'NT AUTHORITY\NetworkService.' Successful exploitation requires the attacker to have access to port 8000 of a vulnerable system running the affected application.

References