CVE-2025-20620: Y's Corporation Stealthone d220

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

SQL Injection vulnerability exists in STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may obtain the administrative password of the web management page.

Affected products

• Y's Corporation Stealthone d220: up to and including v6.03.02
• Y's Corporation Stealthone d340: up to and including v6.03.02

Published 2025-01-14. Last modified 2026-06-17.