Y'S Corporation STEALTHONE D220/D340 OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in the STEALTHONE D220 and D340 network storage servers, both of which are affected by firmware versions through 6.03.02. This vulnerability allows an attacker with access to the device to execute arbitrary operating system commands.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution on the affected device.

Remediation

Users are advised to update the firmware to the latest version. The updated firmware for the D220 and D340 can be downloaded from the STEALTHONE D Series product page. For the D440 model, the latest firmware is available on the STEALTHONE D440 product page.