CVE-2023-22336 - CVE House
Back to Database
Status published Unknown CVE-2023-22336

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku...

Vulnerability Description

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-22336

Credits & Attribution

No credits recorded in the NVD database.

References

More from DOS Co., Ltd.

View All →
CVE-2025-58081
Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier...
High 8.7
CVE-2025-58072
Improper limitation of a pathname to a restricted directory ('Path...
High 8.7
CVE-2025-54819
Improper limitation of a pathname to a restricted directory ('Path...
High 7.1
CVE-2025-54762
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a...
Critical 9.3
CVE-2025-53970
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a...
Critical 9.3

Affected Vendor

DOS Co., Ltd.

View all reports →

Affected Software

SS1 and Rakuraku PC Cloud
Vulnerable Versions:
SS1 Ver.13.0.0.40 and earlier, and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier

Timeline

Official Publish: March 5th, 2023
Last Modified: March 6th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.