Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-22469

OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1. An arbitrary OS command may be executed on the system with a certain non-administrative user privilege.

CVSS 4.0 · 6.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Sato
Products
Cl4nx-j Plus Cl4nx Plus Cl6nx-j Plus and 1 more
CVE-2025-22470

CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous files to be uploaded. An arbitrary Lua script may be executed on the system with the root privilege.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Sato
Products
Cl4nx-j Plus Cl4nx Plus Cl6nx-j Plus and 1 more