STEALTHONE D220 vulnerabilities

3 known vulnerabilities in STEALTHONE D220 from Y'S. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  STEALTHONE D220: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-20620Jan 14, 2025Y'S

  SQL Injection vulnerability exists in STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may obtain the administrative password of the web management page.

• 9.8 Critical severity

  STEALTHONE D220: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-20055Jan 14, 2025Y'SEPSS 1.21%

  OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may execute an arbitrary OS command.

• 7.2 High severity

  STEALTHONE D220: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-20016Jan 14, 2025Y'SEPSS 1.17%

  OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340/D440 provided by Y'S corporation. A user with an administrative privilege who logged in to the web management page of the affected product may execute an arbitrary OS com