CVE-2023-22336
Critical
Description
Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
SeverityCritical
CVSS9.8
Exploit probability—
ProductDos-osaka Rakuraku Pc Cloud Agent
PublishedMar 6, 2023
First seenMar 6, 2023
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dos-osaka rakuraku_pc_cloud_agent | v ≤ 2.1.8 | — |
| dos-osaka ss1 | v ≤ 13.0.0.40 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.