CVE-2025-46409

Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.

Score

CVSS 4.0 8.7 High

Status

Deferred - vultures@jpcert.or.jp

Published

2025-08-28

Last modified

2026-10-18

Weaknesses

CWE-326

Affected products

• Ss1 (Dos Co. Ltd.)

References

• https://www.dos-osaka.co.jp/news/2025/08/250827.html
• https://jvn.jp/en/jp/JVN99577552/