Skip to content
OpenAdvisories
High · 7.0 CVE-2025-53396 EUVD-2025-28525GHSA-q7q6-fxh4-947w

Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), wh…

Published Aug 28, 2025 · Updated Aug 28, 2025 · Assigned by jpcert

Description

Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges.

Affected products

VendorProductAffectedFixed
DOS SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) (Affected under MacOS environment only) —
DOS SS1 Cloud Ver.2.1.3 and earlier (Affected under MacOS environment only) —

References