CVE-2025-40942CWE-250

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4)

High · published January 13, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

⚡ A local privilege escalation vulnerability in TeleControl Server Basic could allow an attacker to run arbitrary code with elevated privileges—talk about a recipe for chaos! 🔥 Think of this vulnerability like a maintenance worker who can access the keys to every office in a building just because they were given the keys to the supply closet. Once they’re in, they can do just about anything! An attacker could exploit this flaw to escalate their privileges, gaining full control over the system. This means they could not only run malicious code but potentially manipulate sensitive information or disrupt operations entirely—certainly not what you want in a secure environment!

Put simply

Think of this vulnerability like a maintenance worker who can access the keys to every office in a building just because they were given the keys to the supply closet. Once they’re in, they can do just about anything! The vulnerability arises from inadequate checks in the TeleControl Server Basic application, allowing users with limited access to gain higher privileges and execute arbitrary code. This flaw affects all versions below 3.1.2.4.

What to do

An attacker could exploit this flaw to escalate their privileges, gaining full control over the system. This means they could not only run malicious code but potentially manipulate sensitive information or disrupt operations entirely—certainly not what you want in a secure environment! To protect your systems, upgrade TeleControl Server Basic to version 3.1.2.4 or later immediately. Additionally, audit user permissions and ensure that least privilege principles are enforced across your applications. You've got this! By following these steps, you'll significantly bolster your security defenses! 🛡️

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2026-01-13T09:44Z
EPSS history
Timeline
  • 13 JAN 09:44Z
    A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4)
    cvelistv5