CVE-2025-32857

Deeper analysis

A vulnerability has been identified in TeleControl Server Basic versions prior to V3.1.2.2 consisting of an SQL injection flaw in the internally used UnlockBufferingSettings method. The affected application permits an authenticated remote attacker who can reach TCP port 8000 to bypass authorization controls, read from and write to the application's database, and execute code under the NT AUTHORITY\NetworkService account. The issue is tracked as CWE-89 and carries a CVSS 4.0 score of 8.7 reflecting network attack vector, low complexity, and high impact on confidentiality, integrity, and availability.

An authenticated remote attacker with network access to the exposed port can supply crafted input to the vulnerable method, resulting in arbitrary database operations and operating-system command execution at the privileges of the NetworkService account. No user interaction or additional privileges beyond valid application credentials are required for successful exploitation.

The Siemens advisory SSA-443402 recommends upgrading to version V3.1.2.2 or later to remediate the flaw and advises restricting network access to port 8000 until patches can be applied.

EPSS for the CVE rose from a low baseline of 0.0004 to a peak of 0.0100, indicating that exploitation interest emerged after disclosure and that the issue warrants renewed attention.