Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: SATO Clear all filters
TI-2025-10221 CVE-2025-11155 · GHSA-jww6-hm47-4x25

WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION

Priority LOW 29

The credentials required to access the device's web server are sent in base64 within the HTTP headers.

CVSS 4.0MEDIUM 6.8 Adjacent network No auth User interaction EPSS 0.00192 Published 2025-09-29 No fix listed CWE-261
TI-2025-16361 CVE-2025-22470 · GHSA-h7gj-pjrx-7pcq

Unrestricted file upload in SATO CL4/6NX Plus

Priority MEDIUM 50

CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous files to be uploaded.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00807 Published 2025-08-06 No fix listed CWE-434
TI-2025-16360 CVE-2025-22469 · GHSA-r6vq-w38v-3h79

OS command injection in SATO CL4/6NX Plus

Priority LOW 39

OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01056 Published 2025-08-06 No fix listed CWE-78
TI-2023-04901 CVE-2023-5328 · GHSA-pmp4-3p6p-g7xv

SATO CL4NX-J Plus Cookie improper authentication

Priority LOW 39

A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00514 Published 2023-10-01 No fix listed CWE-287
TI-2023-04900 CVE-2023-5327 · GHSA-wgjv-rjgv-p6mx

SATO CL4NX-J Plus path traversal

Priority LOW 29

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2023-10-01 No fix listed CWE-22