Multiple vulnerabilities in STEALTHONE D220/D340/D440

Overview Network storage servers STEALTHONE D220/D340/D440 provided by Y'S corporation contain multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2025-20016 OS Command Injection CWE-78 - CVE-2025-20055 SQL Injection CWE-89 - CVE-2025-20620 Chuya Hayakawa and Ryo Kamino of...

STEALTHONE多款产品 操作系统命令注入漏洞

The STEALTHONE D220 is a network storage server from STEALTHONE. An operating system command injection vulnerability exists in various STEALTHONE products, which can be exploited to execute arbitrary OS commands by a user with administrative privileges who can log in to the web administration pag...

STEALTHONE多款产品 SQL注入漏洞

STEALTHONE D220 and others are a network storage server from STEALTHONE. A SQL injection vulnerability exists in various STEALTHONE products, where an attacker with access to the affected products could obtain the administrative password for the web administration page. The following products are...