A vulnerability, which was classified as critical, has been found in YS STEALTHONE D220 and STEALTHONE D340 up to 6.03.02. This issue affects some unknown processing of the component Web Management Page. The manipulation leads to sql injection.

The identification of this vulnerability is CVE-2025-20620. The attack may be initiated remotely. There is no exploit available.