SATO

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

SATO records in CISA KEV

No SATO vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records

TI-2025-16361 CVE-2025-22470 · GHSA-h7gj-pjrx-7pcq

MEDIUM 50

CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous files to be uploaded.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00807 Published 2025-08-06 No fix listed CWE-434

TI-2025-16360 CVE-2025-22469 · GHSA-r6vq-w38v-3h79

LOW 39

OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01056 Published 2025-08-06 No fix listed CWE-78

TI-2023-04901 CVE-2023-5328 · GHSA-pmp4-3p6p-g7xv

LOW 39

A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00514 Published 2023-10-01 No fix listed CWE-287

TI-2023-04899 CVE-2023-5326 · GHSA-55pc-c7f5-9cxc

LOW 39

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00514 Published 2023-10-01 No fix listed CWE-287

TI-2025-10221 CVE-2025-11155 · GHSA-jww6-hm47-4x25

LOW 29

The credentials required to access the device's web server are sent in base64 within the HTTP headers.

CVSS 4.0MEDIUM 6.8 Adjacent network No auth User interaction EPSS 0.00192 Published 2025-09-29 No fix listed CWE-261

TI-2023-04900 CVE-2023-5327 · GHSA-wgjv-rjgv-p6mx

LOW 29

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2023-10-01 No fix listed CWE-22