SATO vulnerabilities
We track 3 vulnerabilities in SATO products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2025.
Latest SATO vulnerabilities
- 9.3 Critical severity
CL4/6NX Plus: Unrestricted Upload of File with Dangerous Type
CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous files to be uploaded. An arbitrary Lua script may be executed on the system with the root privilege.
- 8.8 High severity
CL4NX-J Plus: Improper Authentication
A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2. This affects an unknown part of the component Cookie Handler. The manipulation with the input auth=user,level1,settings; web=true leads to improper authentication. Acces
- 8.8 High severity
CL4NX-J Plus: Improper Authentication
A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be do