Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: DOS Co., Ltd. Component: Ss1 Clear all filters
TI-2023-08607 CVE-2023-22344 · GHSA-63wr-jpff-c77r

Hard-coded credentials in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 50

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00861 Published 2023-03-05 No fix listed CWE-798
TI-2023-08600 CVE-2023-22336 · GHSA-34gr-jxh4-rxfv

Path traversal in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 51

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2023-03-05 No fix listed CWE-22
TI-2023-08599 CVE-2023-22335 · GHSA-44rp-5567-c4w9

Improper access control in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 40

Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00742 Published 2023-03-05 No fix listed CWE-284