JVN#57224029: Multiple vulnerabilities in SS1 and Rakuraku PC Cloud

SS1 is asset management software and Rakuraku PC Cloud is cloud-based asset management service. SS1 and Rakuraku PC Cloud Agent contain multiple vulnerabilities listed below.

Improper Access Control (CWE-284) - CVE-2023-22335

Path Traversal (CWE-22) - CVE-2023-22336

Use of Hard-coded Credentials (CWE-798) - CVE-2023-22344

Impact

• A remote attacker may download arbitrary files of the directory where the product runs - CVE-2023-22335
• A remote attacker may upload a specially crafted file to an arbitrary directory - CVE-2023-22336
• A remote attacker may obtain the password of the debug tool and execute it - CVE-2023-22344
  When these vulnerabilities are combined, it allows a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

Solution

Update the software
Update software to the latest version according to the information provided by the developer.

The developer states that the patch of Rakuraku PC Cloud Agent is applied automatically when the client is launched.

Products Affected

• SS1 Ver.13.1.0.40 and earlier (Media version 13.1.0c and earlier)
• Rakuraku PC Cloud Agent Ver.2.1.8 and earlier