{“lastseen”:””,”description”:”Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet.”,”published”:”2026-01-12T02:27:16.744Z”,”modified”:”2026-01-12T02:27:16.744Z”,”type”:”cve”,”title”:”Execution of arbitrary SQL commands”,”source”:”CSA”,”references”:”https:\/\/www.csa.gov.sg\/alerts-and-advisories\/alerts\/al-2025-127\/”,”id”:”CVE-2025-52694″,”bulletinFamily”:””,”cwe”:null,”cvelist”:null,”sourceData”:”Advantech IoTSuite and IoT Edge Products IoTSuite SaaSComposer prior to version 3.4.15\\nAdvantech IoTSuite and IoT Edge Products IoTSuite Growth Linux docker prior to version V2.0.2\\nAdvantech IoTSuite and IoT Edge Products IoTSuite Starter Linux docker prior to version V2.0.2\\nAdvantech IoTSuite and IoT Edge Products IoT Edge Linux docker prior to version V2.0.2\\nAdvantech IoTSuite and IoT Edge Products IoT Edge Windows prior to version V2.0.2″,”sourceHref”:””,”cvss”:{“score”:10,”severity”:”CRITICAL”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”IoTSuite and IoT Edge Products”,”version”:”IoTSuite SaaSComposer prior to version 3.4.15″,”vendor”:”Advantech”,”ai_description”:”SQL injection vulnerability allowing execution of arbitrary SQL commands”,”ai_severity”:”Critical”,”ai_vendor”:”Advantech”,”ai_product”:”IoTSuite and IoT Edge Products”,”ai_version”:”3.4.15, V2.0.2″,”ai_score”:10}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[9,6,8,36,12,13,7,11,5],"class_list":["post-35084","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-critical","tag-cve","tag-cvss","tag-cvss-100","tag-exploit","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n