CVE-2025-20055
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 78
Summary
CVE-2025-20055 is a critical vulnerability affecting network storage servers STEALTHONE D220/D340 manufactured by Y'S corporation. This issue permits an attacker with access to the product to execute arbitrary OS commands, posing a significant security risk. Successful exploitation could lead to unauthorized system changes, data breaches, or other malicious activities. The vulnerability is classified as an OS command injection flaw, highlighting the importance of applying the necessary patch or mitigation measures to secure affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.