Back to Database
Status published
Critical
CVE-2025-53970
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a...
Vulnerability Description
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53970
Credits & Attribution
No credits recorded in the NVD database.
More from DOS Co., Ltd.
View All →CVE-2025-58081
Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier...
High
8.7
CVE-2025-58072
Improper limitation of a pathname to a restricted directory ('Path...
High
8.7
CVE-2025-54819
Improper limitation of a pathname to a restricted directory ('Path...
High
7.1
CVE-2025-54762
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a...
Critical
9.3
CVE-2025-53396
Incorrect permission assignment for critical resource issue exists in SS1...
High
7.3
Affected Vendor
DOS Co., Ltd.
View all reports →Affected Software
SS1, SS1 Cloud
Vulnerable Versions:
Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) (Affected under Windows environment only), Ver.2.1.3 and earlier (Affected under Windows environment only)
Timeline
Official Publish:
August 28th, 2025
Last Modified:
August 28th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H