CVE-2025-46409 - Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier)

Back Back to CVE browser

HIGH

Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier)

Published Aug 28, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.18%

Description

Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.

Affected products

Vendor DOS Co., Ltd. Product SS1 Default
n/a
- Version
  Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

DOS Co., Ltd.

SS1

n/a

Version	Status	Constraints
Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-326

Inadequate Encryption Strength

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28037		Advisory
https://jvn.jp/en/jp/JVN99577552/
https://www.dos-osaka.co.jp/news/2025/08/250827.html