Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-22469

OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1. An arbitrary OS command may be executed on

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1. An arbitrary OS command may be executed on the system with a certain non-administrative user privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SATO Corporation CL4/6NX Plus

  • prior to firmware 1.15.5-r1affected

SATO Corporation CL4/6NX-J Plus (Japan model)

  • prior to firmware 1.15.5-r1affected

References