This vulnerability in Advantech SaaS Composer allows a remote authenticated attacker to perform SQL injection through a specific interface. Exploitation could lead to arbitrary command execution within the database context, impacting confidentiality, integrity, and availability of sensitive data. Affected versions are those prior to 3.4.17. The CVSS v3.1 base score is 7.2, reflecting high impact with network attack vector, low attack complexity, high privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No official remediation or patch information is currently available.

Successful exploitation could allow attackers to execute arbitrary commands on the database, leading to unauthorized access, modification, or deletion of sensitive information. This compromises the confidentiality, integrity, and availability of the affected system's data. The vulnerability requires authenticated access, which limits exposure to some extent but still poses a significant risk within trusted user environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected interface to trusted users only and monitor for suspicious activity. Avoid exposing the vulnerable interface to untrusted networks. Follow up with Advantech for updates on patches or official mitigations.