Approved changes feed: RSS · Atom

cpe:2.3:a:dos_co.,_ltd.:ss1:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDos Co., Ltd. (65883d38-ceef-5dc4-9fc2-f211de979330)
ProductSs1 (b7c6034f-f5cd-54a6-8de1-6a47ef0a7a1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58081 vulnerable 2026-06-08 07:35:17.145770 Details available
HIGH (7.5)
Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to view arbitrary files with root privileges.
Published: 2025-08-28T08:28:38.426Z
Updated: 2025-08-28T13:43:05.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58072 vulnerable 2026-06-08 07:35:17.111646 Details available
HIGH (7.5)
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker.
Published: 2025-08-28T08:28:33.132Z
Updated: 2025-08-28T13:44:05.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54819 vulnerable 2026-06-08 07:33:13.270688 Details available
MEDIUM (6.5)
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, legitimate files may be overwritten by a remote authenticated attacker.
Published: 2025-08-28T08:28:24.751Z
Updated: 2025-08-28T13:45:19.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54762 vulnerable 2026-06-08 07:33:13.175063 Details available
CRITICAL (9.8)
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
Published: 2025-08-28T08:28:14.302Z
Updated: 2025-08-28T14:12:10.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53970 vulnerable 2026-06-08 07:31:16.070764 Details available
CRITICAL (9.8)
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
Published: 2025-08-28T08:28:07.400Z
Updated: 2025-08-28T14:14:40.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53396 vulnerable 2026-06-08 07:31:14.474231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52460 vulnerable 2026-06-08 07:31:11.636338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46409 vulnerable 2026-06-08 07:27:08.186025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.