OS Command Injection Vulnerability in CL4/6NX Plus and CL4/6NX-J Plus by Sato
CVE-2025-22469

6.9MEDIUM

Key Information:

Vendor

Sato Corporation

Status
Cl4/6nx Plus
Cl4/6nx-j Plus (japan Model)
Vendor
CVE Published:
6 August 2025

What is CVE-2025-22469?

An OS command injection vulnerability has been identified in the Sato CL4/6NX Plus and CL4/6NX-J Plus models, allowing non-administrative users to execute arbitrary OS commands on the system. This issue affects devices running firmware versions prior to 1.15.5-r1, potentially compromising the integrity and security of the affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CL4/6NX Plus prior to firmware 1.15.5-r1

CL4/6NX-J Plus (Japan model) prior to firmware 1.15.5-r1

References

https://www.sato-global.com/support_notices/240830/
https://jvn.jp/en/jp/JVN16547726/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.