What’s Vulnerable › Vulnerabilities

CVE-2025-22469

• Severity: medium (CVSS 6.9 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-06 · updated 2026-06-17
• Weakness: CWE-78

Description

OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1. An arbitrary OS command may be executed on the system with a certain non-administrative user privilege.

Affected products

• SATO Corporation CL4/6NX-J Plus (Japan model): before firmware 1.15.5-r1
• SATO Corporation CL4/6NX Plus: before firmware 1.15.5-r1

References

• https://jvn.jp/en/jp/JVN16547726/
• https://www.sato-global.com/support_notices/240830/

Get alerted when CVE-2025-22469 or the next vulnerability affects your stack