Description
Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | IoTSuite and IoT Edge Products | SaaSComposer prior to version V3.4.15, IoTSuite Growth Linux docker prior to version V2.0.2, IoTSuite Starter Linux docker prior to version V2.0.2, IoT Edge Linux docker prior to version V2.0.2, IoT Edge Windows prior to version V2.0.2, WebAccess/SCADA prior to version V9.2.2, WebAccess SaaS-Compos… | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
Winz18/CVE-2025-52694-POC ★ 3 · Jan 12, 2026
CVE-2025-52694 Critical SQL Injection in Advantech IoTSuite/SaaS-Composer
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Advantech WISE-IoTSuite/SaaS - SQL Injection http/cves/2025/CVE-2025-52694.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.