CVE-2025-20016

🗓️ 14 Jan 2025 09:32:33Reported by jpcertType

OS command injection in Y'S network storage servers allows execution of arbitrary commands by admins.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability in the web interface for controlling microprogrammed software-based network storage devices STEALTHONE D220, D340, and D440 allows a perpetrator to execute arbitrary commands.	28 Jan 202500:00	–	bdu_fstec
Circl	CVE-2025-20016	14 Jan 202509:38	–	circl
CNNVD	STEALTHONE多款产品操作系统命令注入漏洞	14 Jan 202500:00	–	cnnvd
Cvelist	CVE-2025-20016	14 Jan 202509:32	–	cvelist
EUVD	EUVD-2025-2141	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in STEALTHONE D220/D340/D440	6 Feb 202509:27	–	jvn
NVD	CVE-2025-20016	14 Jan 202510:15	–	nvd
Positive Technologies	PT-2025-1294 · Unknown · Stealthone D220 +2	6 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20016	6 Feb 202502:30	–	redhatcve
Vulnrichment	CVE-2025-20016	14 Jan 202509:32	–	vulnrichment

Vulners

Node

y's_corporation stealthone_d220Match6.03.02

y's_corporation stealthone_d340Match6.03.02

y's_corporation stealthone_d440Match7.00.10

[
  {
    "vendor": "Y'S corporation",
    "product": "STEALTHONE D220",
    "versions": [
      {
        "version": "firmware v6.03.02 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Y'S corporation",
    "product": "STEALTHONE D340",
    "versions": [
      {
        "version": "firmware v6.03.02 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Y'S corporation",
    "product": "STEALTHONE D440",
    "versions": [
      {
        "version": "firmware v7.00.10 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
stealthone	www.stealthone.net/product_info/d220-d340%e3%80%8cv6-03-03%e3%80%8d%e5%8f%8a%e3%81%b3d440%e3%80%8cv7-00-11%e3%80%8d%e3%83%95%e3%82%a1%e3%83%bc%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%82%92%e3%83%aa%e3%83%aa%e3%83%bc%e3%82%b9%e8%87%b4/
jvn	www.jvn.jp/en/vu/JVNVU99653331/

17 Jun 2026 08:40Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.2

EPSS0.01118

SSVC

CWE-78