PT-2025-34975 · Ss1+1 · Ss1+1

Denis Faiustov + 2 · Published 2025-08-28 · Updated 2025-08-28 · CVE-2025-53970

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SS1 versions 16.0.0.10 and earlier SS1 Media versions 16.0.0a and earlier

Description SS1 versions 16.0.0.10 and earlier (Media version 16.0.0a and earlier) allow a remote, unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-53970

Affected Products

Ss1

Ss1 Media

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-53970 · Security Note
• https://dos-osaka.co.jp/news/2025/08/250827.html · Note
• https://jvn.jp/en/jp/JVN99577552 · Note
• https://twitter.com/VulmonFeeds/status/1961011213476720994 · Twitter Post
• https://twitter.com/CVEnew/status/1960987662443274378 · Twitter Post