CVE-2025-46409

Summary

Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.

Affected Software

VendorProductVersion RangeStatus
DOS Co., Ltd.SS1Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier)affected

Weaknesses

  • CWE-326: Inadequate encryption strength

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References