Description (CNA)
Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Advantech / SaaS Composer | affected prior to version 3.4.17 |
| Advantech / IoTSuite Growth Linux docker | affected prior to version 2.2.0 |
| Advantech / IoTSuite Starter Linux docker | affected prior to version 2.2.0 |
| Advantech / IoT Edge Linux docker | affected prior to version 2.2.0 |
| Advantech / IoT Edge Windows | affected prior to version 2.2.0 |
| Advantech / WebAccess/SCADA | affected prior to version 9.2.3 |
| Advantech / WebAccess SaaS-Composer | affected prior to version 3.4.17.1 |
| Advantech / ECOWatch SaaS-Composer | affected prior to version 3.4.17 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.