DOS SS1 Path Traversal Vulnerability Allowing File Overwrite

A path traversal vulnerability has been identified in DOS SS1 versions 16.0.0.10 and earlier, as well as in SS1 Cloud versions 2.1.3 and earlier. This vulnerability allows remote authenticated attackers to overwrite legitimate files by exploiting improper limitations on file paths, enabling unauthorized access to the application's file system.

Impact

Exploitation of this vulnerability allows remote authenticated attackers to overwrite legitimate files on the affected system.

Remediation

Users are advised to update to the latest version of SS1 or SS1 Cloud. Instructions for applying the update are available on the DOS Co., Ltd. website or through the SS1 Cloud management interface.