Execution of arbitrary SQL commands
75Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 10epss 40%
from disclosure to weapon0 days
Published on NVDJan 12
1st PoCJan 12
exploitation probability
40%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Advantech · IoTSuite and IoT Edge Productspublic PoCs found — 1
githubgithub.com/Winz18/CVE-2025-52694-POC★ 3⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.