← CVE Intelligence

CVE-2025-53970

DOS Co., Ltd. / SS1 PUBLISHED

Description (CNA)

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

Affected (CNA)

Vendor / productVersions
DOS Co., Ltd. / SS1affected Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) (Affected under Windows environment only)
DOS Co., Ltd. / SS1 Cloudaffected Ver.2.1.3 and earlier (Affected under Windows environment only)

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.