CVE-2025-40765

43th percentile - higher than 43% of all known CVEs

A vulnerability has been identified in TeleControl Server Basic V3.1 (all versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability that could allow an unauthenticated remote attacker to obtain password hashes of users and to log in and perform authenticated operations of the database service.

An attacker could obtain password hashes and gain authenticated access to the database, potentially leading to further escalation and data compromise. This poses a serious threat to confidentiality and integrity.

Update TeleControl Server Basic to version V3.1.2.3 or later and restrict network access to the database service.