CVE-2025-30032: SQL Injection Vulnerability in TeleControl Server Basic

Overview

An alarming vulnerability has been identified in the TeleControl Server Basic, a widely used server system that is now at risk of SQL injection attacks. This flaw, tracked as CVE-2025-30032, primarily affects all versions of TeleControl Server Basic prior to V3.1.2.2.
This vulnerability is critical as it not only allows attackers to bypass the system’s authorization controls, but also permits them to read from and write to the application’s database, thereby potentially compromising system integrity or causing significant data leakage. The ramifications of such a breach can be far-reaching, especially considering the wide usage of TeleControl Server Basic across various industries.

Vulnerability Summary

CVE ID: CVE-2025-30032
Severity: High (8.8 CVSS Severity Score)
Attack Vector: Network
Privileges Required: Low
User Interaction: None
Impact: System compromise, Data leakage, Code execution

Affected Products

Product | Affected Versions

TeleControl Server Basic | All versions < V3.1.2.2 How the Exploit Works

The vulnerability lies within the ‘UpdateDatabaseSettings’ method used internally by the application. An authenticated remote attacker can exploit this flaw by injecting malicious SQL code, bypassing the application’s authorizations.
By manipulating the SQL query, the attacker can read from and write to the application’s database, thereby gaining unauthorized access to sensitive data. Furthermore, the attacker can execute code with “NT AUTHORITY\NetworkService” permissions, providing them significant control over the compromised system. A successful attack requires the attacker to access port 8000 on a system where a vulnerable version of the application is running.

Conceptual Example Code

Here is a conceptual example of a malicious SQL injection that an attacker might use:

'; DROP TABLE users; --

An attacker might use this SQL command to delete the ‘users’ table from the database. The ‘–‘ at the end of the command is a SQL comment, which means that anything following it will be ignored. This allows the attacker to terminate the query at any point, making room for their malicious input.
Please note that this is a conceptual example and might not work as-is. The actual exploit will depend on the specific configuration and security measures of the system being targeted.