SQL Injection Vulnerability in STEALTHONE D220/D340 by Y'S Corporation

CVE-2025-20620

What is CVE-2025-20620?

A SQL Injection vulnerability has been discovered in the STEALTHONE D220 and D340 products from Y'S Corporation. This flaw enables an attacker to execute unauthorized SQL commands, which can lead to the exposure of sensitive information, particularly the administrative password of the web management interface. This presents a severe security risk, allowing attackers to gain unauthorized access to critical administrative functions. It is crucial for users of affected versions to implement updates and security best practices to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References