Path Traversal Vulnerability in SS1 and Rakuraku PC Cloud Agent Products
CVE-2023-22336

9.8CRITICAL

Key Information:

Vendor

Dos Co., Ltd.

Status
Ss1 And Rakuraku Pc Cloud
Vendor
CVE Published:
6 March 2023

What is CVE-2023-22336?

A path traversal vulnerability exists in SS1 versions up to 13.0.0.40 and Rakuraku PC Cloud Agent versions up to 2.1.8. This flaw enables remote attackers to upload specially crafted files to arbitrary directories, posing a significant security risk. When exploited in conjunction with other vulnerabilities, it could allow attackers to execute arbitrary code with elevated SYSTEM privileges, leading to further compromise of the affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SS1 and Rakuraku PC Cloud SS1 Ver.13.0.0.40 and earlier, and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier

References

https://www.dos-osaka.co.jp/news/2023/03/230301.html
https://jvn.jp/en/jp/JVN57224029/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.