Listen to this Post
The CVE-2025-34245 vulnerability exists within the `AjaxStandaloneVpnClientsController.ajaxAction()` function of Advantech WebAccess/VPN. This function handles AJAX requests for datatable operations, such as searching and sorting client lists. It fails to properly sanitize user-supplied input passed through datatable search parameters before incorporating it into SQL queries. An authenticated attacker, even with low-privileged observer permissions, can craft malicious search input containing SQL code. When this input is processed by the vulnerable function, the injected SQL commands are executed directly against the application’s backend database. This flaw allows the attacker to read, modify, or delete database records they are not authorized to access, primarily leading to the disclosure of sensitive information stored within the database, such as other user credentials or system configuration details. The attack vector is network-based and requires a low attack complexity with no user interaction beyond authentication.
Platform: Advantech WebAccess/VPN
Version: Prior 1.1.5
Vulnerability: SQL Injection
Severity: Medium
date: 11/06/2025
Prediction: 2025-01-31
What Undercode Say:
Analytics
`curl -k “https://
`sqlmap -u “https://
How Exploit:
1. Attacker authenticates with low-privilege account.
- Sends POST request with SQL payload in `search[bash]` parameter.
- Payload bypasses filters and executes on database server.
- Attacker exfiltrates data via UNION SELECT or error-based techniques.
Protection from this CVE:
- Upgrade to version 1.1.5.
- Implement parameterized queries.
- Enforce strict input validation.
- Apply principle of least privilege.
Impact:
- Unauthorized database access.
- Sensitive information disclosure.
- Potential data manipulation.
- Loss of confidentiality.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
