CVE-2025-20016

🗓️ 14 Jan 2025 09:32:33Reported by jpcertType

OS command injection in Y'S network storage servers allows execution of arbitrary commands by admins.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-20016	14 Jan 202509:38	–	circl
CNNVD	STEALTHONE多款产品操作系统命令注入漏洞	14 Jan 202500:00	–	cnnvd
Cvelist	CVE-2025-20016	14 Jan 202509:32	–	cvelist
EUVD	EUVD-2025-2141	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in STEALTHONE D220/D340/D440	6 Feb 202509:27	–	jvn
NVD	CVE-2025-20016	14 Jan 202510:15	–	nvd
Positive Technologies	PT-2025-1294 · Unknown · Stealthone D220 +2	6 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20016	6 Feb 202502:30	–	redhatcve
Vulnrichment	CVE-2025-20016	14 Jan 202509:32	–	vulnrichment

Vulners

Node

y's_corporation stealthone_d220Match6.03.02

y's_corporation stealthone_d340Match6.03.02

y's_corporation stealthone_d440Match7.00.10

[
  {
    "vendor": "Y'S corporation",
    "product": "STEALTHONE D220",
    "versions": [
      {
        "version": "firmware v6.03.02 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Y'S corporation",
    "product": "STEALTHONE D340",
    "versions": [
      {
        "version": "firmware v6.03.02 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Y'S corporation",
    "product": "STEALTHONE D440",
    "versions": [
      {
        "version": "firmware v7.00.10 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
stealthone	www.stealthone.net/product_info/d220-d340%e3%80%8cv6-03-03%e3%80%8d%e5%8f%8a%e3%81%b3d440%e3%80%8cv7-00-11%e3%80%8d%e3%83%95%e3%82%a1%e3%83%bc%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%82%92%e3%83%aa%e3%83%aa%e3%83%bc%e3%82%b9%e8%87%b4/
jvn	www.jvn.jp/en/vu/JVNVU99653331/

15 Apr 2026 00:35Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.2

EPSS0.00713

SSVC

CWE-78