CVE-2025-52694: critical vulnerability in Advantech IoTSuite and IoT Edge Products
Execution of arbitrary SQL commands
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
75Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 10epss 40%
from disclosure to weaponsame day
Published on NVDJan 12
1st PoCJan 12
Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Advantech · IoTSuite and IoT Edge Productspublic PoCs found — 1
githubgithub.com/Winz18/CVE-2025-52694-POC★ 3⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.