Y'S Corporation STEALTHONE D220/D340 SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the STEALTHONE D220 and D340 models, both running firmware through version 6.03.02. This vulnerability allows an attacker with access to the device to retrieve the administrative password for the web management interface.

Impact

Exploitation of this vulnerability enables an attacker to obtain the administrative password for the web management page.

Remediation

Users are advised to update the firmware to the latest version. The updated firmware for the D220 and D340 models is available on the STEALTHONE D Series product page. For the D440 model, firmware version 7.00.11 can be downloaded from the D440 product page.