Vulnerabilidades de DOS Co., Ltd.
CVEs publicadas que afetam produtos de DOS Co., Ltd.: 8 registro(s), com severidade, exploração e correções.
CVE-2025-58081
Alta · 7.5
CWE-259 28/08/2025
Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16...
Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to view arbitrary files with root privileges.
CVE-2025-58072
Alta · 7.5
CWE-22 28/08/2025
Path Traversal em DOS Co., Ltd. SS1
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker.
CVE-2025-54819
Média · 6.5
CWE-22 28/08/2025
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in...
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, legitimate files may be overwritten by a remote authenticated attacker.
CVE-2025-54762
Crítica · 9.8
CWE-434 28/08/2025
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated...
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
CVE-2025-53970
Crítica · 9.8
CWE-434 28/08/2025
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated...
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
CVE-2025-53396
Alta · 7.0
CWE-732 28/08/2025
Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and...
Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges.
CVE-2025-52460
Média · 5.3
CWE-552 28/08/2025
Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier...
Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.
CVE-2025-46409
Alta · 7.5
CWE-326 28/08/2025
Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0...
Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.