Description
Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to
execute arbitrary commands via a specific interface,
potentially enabling the attacker to access, modify, or delete sensitive
information within the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | SaaS Composer | prior to version 3.4.17 | — |
| Advantech | IoTSuite Growth Linux docker | prior to version 2.2.0 | — |
| Advantech | IoTSuite Starter Linux docker | prior to version 2.2.0 | — |
| Advantech | IoT Edge Linux docker | prior to version 2.2.0 | — |
| Advantech | IoT Edge Windows | prior to version 2.2.0 | — |
| Advantech | WebAccess/SCADA | prior to version 9.2.3 | — |
| Advantech | WebAccess SaaS-Composer | prior to version 3.4.17.1 | — |
| Advantech | ECOWatch SaaS-Composer | prior to version 3.4.17 | — |