CVE-2025-20055

Name of the Vulnerable Software and Affected Versions STEALTHONE D220/D340 versions up to 6.03.02

Description The issue is related to an OS command injection vulnerability in the network storage servers STEALTHONE D220/D340 provided by Y'S corporation. This vulnerability may allow a remote attacker to execute arbitrary OS commands if they can access the affected product.

Recommendations For STEALTHONE D220/D340 versions up to 6.03.02, update to a version later than 6.03.02 to resolve the issue. As a temporary workaround, consider restricting access to the affected product to minimize the risk of exploitation.