The vulnerability is a classic SQL injection flaw in a web interface of Advantech IoT and SaaS products. An attacker who is authenticated can craft malicious input that is passed unfiltered to an SQL query, permitting arbitrary command execution against the database. This can lead to unauthorized read, modification or deletion of sensitive data, compromising confidentiality and integrity of the system.

Affected products include Advantech ECOWatch SaaS-Composer, Advantech IoT Edge Linux docker, Advantech IoT Edge Windows, Advantech IoTSuite Growth Linux docker, Advantech IoTSuite Starter Linux docker, Advantech SaaS Composer, Advantech WebAccess SaaS-Composer, and Advantech WebAccess/SCADA. No specific version information is supplied in the CNA data; users should verify if their installed versions are within the affected range.

The CVSS score of 7.2 indicates a high risk to confidentiality and integrity. The EPSS score is currently unavailable, so the real‑world likelihood of exploitation cannot be quantified. Based on the description, it is inferred that the attack vector is a web application interface that receives user‑supplied data and requires authentication. The vulnerability is not listed in the CISA KEV catalog, so there is no known widespread exploitation yet, but the potential for data breach remains.