GCVE - cpe:2.3:a:y's_corporation:stealthone_d340:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:y's_corporation:stealthone_d340:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Y'S Corporation (`cfff354d-c175-53fb-9423-4f595d27306e`)
Product	Stealthone D340 (`d96ff70c-2e59-5cc4-b667-87e5add5d086`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-20620`	vulnerable	2026-06-08 07:08:48.543958	Details available HIGH (7.5) SQL Injection vulnerability exists in STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may obtain the administrative password of the web management page. Published: 2025-01-14T09:34:47.643Z Updated: 2025-01-14T14:35:32.214Z Open on db.gcve.eu Reference links https://stealthone.net/product_info/d220-d340%e3%80%8cv6-03-03%e3%80%8d%e5%8f%8a%e3%81%b3d440%e3%80%8cv7-00-11%e3%80%8d%e3%83%95%e3%82%a1%e3%83%bc%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%82%92%e3%83%aa%e3%83%aa%e3%83%bc%e3%82%b9%e8%87%b4/ https://jvn.jp/en/vu/JVNVU99653331/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-20055`	vulnerable	2026-06-08 07:08:38.861158	Details available CRITICAL (9.8) OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may execute an arbitrary OS command. Published: 2025-01-14T09:33:46.428Z Updated: 2025-01-14T15:46:40.322Z Open on db.gcve.eu Reference links https://stealthone.net/product_info/d220-d340%e3%80%8cv6-03-03%e3%80%8d%e5%8f%8a%e3%81%b3d440%e3%80%8cv7-00-11%e3%80%8d%e3%83%95%e3%82%a1%e3%83%bc%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%82%92%e3%83%aa%e3%83%aa%e3%83%bc%e3%82%b9%e8%87%b4/ https://jvn.jp/en/vu/JVNVU99653331/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-20016`	vulnerable	2026-06-08 07:08:38.768749	Details available HIGH (7.2) OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340/D440 provided by Y'S corporation. A user with an administrative privilege who logged in to the web management page of the affected product may execute an arbitrary OS command. Published: 2025-01-14T09:32:33.704Z Updated: 2025-01-14T15:48:58.147Z Open on db.gcve.eu Reference links https://stealthone.net/product_info/d220-d340%e3%80%8cv6-03-03%e3%80%8d%e5%8f%8a%e3%81%b3d440%e3%80%8cv7-00-11%e3%80%8d%e3%83%95%e3%82%a1%e3%83%bc%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%82%92%e3%83%aa%e3%83%aa%e3%83%bc%e3%82%b9%e8%87%b4/ https://jvn.jp/en/vu/JVNVU99653331/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.