Path Traversal Vulnerability in SS1 and Rakuraku PC Cloud Agent Products
CVE-2023-22336

9.8CRITICAL

Key Information:

Vendor: Dos Co., Ltd.
Status: Ss1 And Rakuraku Pc Cloud
Vendor: CVE Published:; 6 March 2023

🔔 Create Dos Co., Ltd. Vulnerability Alert

What is CVE-2023-22336?

A path traversal vulnerability exists in SS1 versions up to 13.0.0.40 and Rakuraku PC Cloud Agent versions up to 2.1.8. This flaw enables remote attackers to upload specially crafted files to arbitrary directories, posing a significant security risk. When exploited in conjunction with other vulnerabilities, it could allow attackers to execute arbitrary code with elevated SYSTEM privileges, leading to further compromise of the affected systems.

Affected Version(s)

SS1 and Rakuraku PC Cloud SS1 Ver.13.0.0.40 and earlier, and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier

References

https://www.dos-osaka.co.jp/news/2023/03/230301.html

https://jvn.jp/en/jp/JVN57224029/

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 6, 2023
Vulnerability Reserved
Dec 28, 2022

CVE-2023-22336 Data

JSON