The vulnerability of the AjaxStandaloneVpnClientsController.ajaxAction() function in the remote monitoring software with Advantech WebAccess/VPN virtual private network capabilities allows a perpetrator to access information related to the database.

The vulnerability of the AjaxStandaloneVpnClientsController.ajaxAction function in the remote monitoring software with Virtual Private Network capabilities of Advantech WebAccess/VPN involves a lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker...

CVE-2025-34245

Advantech WebAccess/VPN before 1.1.5 contains a SQL injection in AjaxStandaloneVpnClientsController.ajaxAction() that an authenticated, low-privileged observer can exploit via datatable search parameters, potentially disclosing database information. Affected version: prior to 1.1.5. Some connecte...