UpdateWebServerGatewaySettings Bypass Code Execution

The vulnerability of the UpdateWebServerGatewaySettings method in the software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...

CVE-2025-32858

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, t...

PT-2025-16859

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description A SQL injection vulnerability has been identified in the affected application through the internally used UpdateWebServerGatewaySettings method. This could allow an authenticated...

CVE-2025-32858: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, t...