Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-54762 EUVD-2025-28569GHSA-9xff-xvpg-rrgv

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and ex…

Published Aug 28, 2025 · Updated Aug 28, 2025 · Assigned by jpcert

Vendor: DOS Product: SS1

Description

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

Affected products

VendorProductAffectedFixed
DOS SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) (Windows environment only) —

References