Approved changes feed: RSS · Atom

cpe:2.3:a:dos-osaka:rakuraku_pc_cloud_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDos Osaka (e011293f-323c-5f2e-94ab-b0ccf08ddccb)
ProductRakuraku Pc Cloud Agent (33887dac-f064-557c-ac8a-efa5c48dc3fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22344 vulnerable 2026-06-08 05:54:24.687739 Details available
Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-06T16:06:53.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22336 vulnerable 2026-06-08 05:54:24.681401 Details available
Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-06T16:08:05.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22335 vulnerable 2026-06-08 05:54:24.680256 Details available
Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directory where the product runs. As a result of exploiting this vulnerability with CVE-2023-22336 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-06T16:10:23.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.