CVE-2025-52694: Execution of arbitrary SQL commands
Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52694?
CVE-2025-52694 has a high severity rating due to its potential to allow execution of arbitrary SQL commands by unauthorized remote attackers.
How do I fix CVE-2025-52694?
To fix CVE-2025-52694, update your Advantech IoT Edge and Iotsuite software to the latest versions that are not vulnerable.
Who is affected by CVE-2025-52694?
CVE-2025-52694 affects users of Advantech IoT Edge Linux Docker, IoT Edge Windows, Iotsuite Growth Linux Docker, Iotsuite SaaS Composer, and Iotsuite Starter Linux Docker versions below specific thresholds.
Can CVE-2025-52694 compromise data confidentiality?
Yes, exploitation of CVE-2025-52694 can compromise data confidentiality by allowing attackers to execute unauthorized SQL commands.
Is CVE-2025-52694 an authenticated or unauthenticated attack vector?
CVE-2025-52694 is an unauthenticated attack vector, allowing remote attackers to exploit it without needing to authenticate.