Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-22344

Published: 06/03/2023 Updated: 13/03/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Dos-osaka

Vulnerability Summary

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and previous versions and Rakuraku PC Cloud Agent Ver.2.1.8 and previous versions allows a remote malicious user to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote malicious user to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

dos-osaka rakuraku pc cloud agent

dos-osaka ss1

References

CWE-798https://jvn.jp/en/jp/JVN57224029/https://www.dos-osaka.co.jp/news/2023/03/230301.htmlhttps://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook