CVEvulnerability

CVE-2025-52694

9.8 CRITICAL Published 2026-01-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2026-01-12
Last modified
2026-06-17
Assigner
5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
CVSS 3.1 (5f57b9bf-260d-4433-bf07-b6a79e9bb7d4)
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89

Description

Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.

Affected configurations

• advantech iot edge linux docker (< 2.0.2) • advantech iot edge windows (< 2.0.2) • advantech iotsuite growth linux docker (< 2.0.2) • advantech iotsuite saas composer (< 3.4.15) • advantech iotsuite starter linux docker (< 2.0.2)

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References