DOS SS1 Hard-Coded Password Vulnerability Allowing Root Privilege File Access

A vulnerability exists in DOS SS1 versions through 16.0.0.10, including media version 16.0.0a and earlier. This vulnerability involves a hard-coded password that enables remote, unauthenticated attackers to access arbitrary files with root privileges.

Impact

Exploitation of this vulnerability allows remote, unauthenticated attackers to view arbitrary files with root privileges.

Remediation

Users are advised to update to the latest version of SS1. For SS1 Cloud, update to a version later than 2.1.3. Instructions for applying the update are available on the DOS Co., Ltd. website.