CVE-2023-22335 - CVE House

Back to Database

Status published Unknown CVE-2023-22335

Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and...

0 CVSS

Vulnerability Description

Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directory where the product runs. As a result of exploiting this vulnerability with CVE-2023-22336 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-22335

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from DOS Co., Ltd.

View All →

Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier...

Improper limitation of a pathname to a restricted directory ('Path...

Improper limitation of a pathname to a restricted directory ('Path...

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a...

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a...

Affected Vendor

DOS Co., Ltd.

View all reports →

Affected Software

SS1 and Rakuraku PC Cloud

Vulnerable Versions:

SS1 Ver.13.0.0.40 and earlier, and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier

Timeline

Official Publish: March 5th, 2023

Last Modified: March 6th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.