{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aadvantechiot_edge_linux_docker/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:advantech:iot_edge_linux_docker:*:*:*:*:*:*:*:*","cpe:2.3:a:advantech:iot_edge_windows:*:*:*:*:*:*:*:*","cpe:2.3:a:advantech:iotsuite_growth_linux_docker:*:*:*:*:*:*:*:*","cpe:2.3:a:advantech:iotsuite_saas_composer:*:*:*:*:*:*:*:*","cpe:2.3:a:advantech:iotsuite_starter_linux_docker:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2025-52694"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["IoTSuite SaaSComposer (\u003c 3.4.15)","IoTSuite Growth Linux docker (\u003c 2.0.2)","IoTSuite Starter Linux docker (\u003c 2.0.2)","IoT Edge Linux docker (\u003c 2.0.2)","IoT Edge Windows (\u003c 2.0.2)"],"_cs_severities":["critical"],"_cs_tags":["sqli","vulnerability","iot"],"_cs_type":"advisory","_cs_vendors":["Advantech"],"content_html":"\u003cp\u003eCVE-2025-52694 is a critical vulnerability (CVSS 10.0) affecting multiple Advantech IoTSuite and IoT Edge products. The flaw arises from improper sanitization of the 'filename' parameter in the '/displays/{filename}.json' endpoint, which is directly concatenated into PostgreSQL queries. Unauthenticated attackers can perform stacked queries to extract database information, modify records, or potentially achieve remote code execution depending on database privilege levels. Public exploit scripts and Nuclei templates have been released, elevating the risk of exploitation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to conduct unauthorized database queries, potentially leading to full data compromise, unauthorized modification of sensitive information, and remote code execution on the underlying server.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch affected instances immediately: Update IoTSuite SaaS Composer to at least 3.4.15 and all other affected IoTSuite/IoT Edge products to version 2.0.2 or later.\u003c/li\u003e\n\u003cli\u003eImplement request validation: Ensure that the 'filename' parameter is strictly validated or that parameterized queries are enforced to prevent SQL injection.\u003c/li\u003e\n\u003cli\u003eDeploy network monitoring: Use the hunt leads provided to monitor for suspicious pattern matching in URI paths targeting the identified endpoint.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T13:02:26Z","date_published":"2026-10-28T13:02:26Z","id":"https://feed.craftedsignal.io/briefs/2026-10-advantech-sql-injection/","summary":"CVE-2025-52694 is a critical unauthenticated SQL injection vulnerability in Advantech IoTSuite and IoT Edge products that allows remote database manipulation and potential code execution.","title":"Advantech IoTSuite and IoT Edge SQL injection (CVE-2025-52694)","url":"https://feed.craftedsignal.io/briefs/2026-10-advantech-sql-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:advantech:iot_edge_linux_docker:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}