Approved changes feed: RSS · Atom

cpe:2.3:a:dos_co.,_ltd.:ss1_and_rakuraku_pc_cloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDos Co., Ltd. (65883d38-ceef-5dc4-9fc2-f211de979330)
ProductSs1 And Rakuraku Pc Cloud (2eb4fdca-2248-522a-aaf9-c257ccef91ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22344 vulnerable 2026-06-08 05:54:24.687709 Details available
Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-06T16:06:53.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22336 vulnerable 2026-06-08 05:54:24.681362 Details available
Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-06T16:08:05.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22335 vulnerable 2026-06-08 05:54:24.679710 Details available
Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directory where the product runs. As a result of exploiting this vulnerability with CVE-2023-22336 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-06T16:10:23.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.