CVE-2025-32863

Deeper analysis

A vulnerability has been identified in TeleControl Server Basic versions prior to V3.1.2.2 consisting of an SQL injection flaw in the internally used UnlockTraceLevelSettings method. The affected component permits an authenticated remote attacker who can reach TCP port 8000 to bypass authorization controls, read from and write to the application database, and execute operating-system commands under the NT AUTHORITY\NetworkService account. The issue is tracked as CWE-89 and carries a CVSS 4.0 score of 8.7.

An attacker with valid credentials on a reachable instance can submit crafted input through the vulnerable method to manipulate SQL queries, escalate privileges within the database, and ultimately run arbitrary code on the host. No user interaction or additional network services are required beyond access to the exposed port.

The official Siemens advisory SSA-443402 describes the affected versions and provides remediation guidance, including the availability of version V3.1.2.2 that resolves the injection vector.

The associated EPSS probability rose from a baseline of 0.0004 to a peak of 0.0100, indicating that exploitation interest increased after public disclosure.