SQL Injection Vulnerability in TeleControl Server Basic by Siemens

CVE-2025-32858

Summary

A security vulnerability has been discovered in TeleControl Server Basic, affecting all versions prior to V3.1.2.2. This vulnerability enables SQL injection via the 'UpdateWebServerGatewaySettings' method, potentially allowing an authenticated remote attacker to circumvent authorization controls. Such an attack could lead to unauthorized access to the application's database, enabling the attacker to read and manipulate sensitive data as well as execute code with elevated permissions under 'NT AUTHORITY\NetworkService'. Attackers must gain access to port 8000 to exploit this vulnerability on targeted systems.

References