Description
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DOS | SS1 | Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) (Affected under Windows environment only) | — |
| DOS | SS1 Cloud | Ver.2.1.3 and earlier (Affected under Windows environment only) | — |