CVE-2020-10617

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/NMS versions prior to 3.0.2

Description The issue allows an unauthenticated attacker to perform SQL injection, potentially gaining access to sensitive information. This can be achieved through multiple methods.

Recommendations For versions prior to 3.0.2, update to version 3.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and implementing additional security measures to prevent SQL injection attacks.