CVE-2025-32860

CVE-2025-32860 affects Siemens TeleControl Server Basic before version 3.1.2.2. The vulnerability is an SQL injection via the internal UnlockWebServerGatewaySettings method, enabling an authenticated remote attacker to bypass authorization, read/write the application database, and execute code wi...