Read the docs

Allied-telesis

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Allied-telesis records in CISA KEV

No Allied-telesis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Centrecom Ar260s Firmware 4 records MEDIUM

Records

4 records

TI-2022-18020 CVE-2022-38394 · GHSA-x5m2-f2v4-5h4p

Hard-coded credentials in Allied Telesis K.K. CentreCOM AR260S V2

Priority MEDIUM 44

Use of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote unauthenticated attacker to execute an arbitrary OS command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01104 Published 2022-09-08 No fix listed CWE-798
TI-2022-17803 CVE-2022-38094 · GHSA-9v67-rxp6-5599

OS command injection in Allied Telesis K.K. CentreCOM AR260S V2

Priority MEDIUM 41

OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2022-09-08 No fix listed CWE-78
TI-2022-15952 CVE-2022-35273 · GHSA-g9jp-wj8f-h7fh

OS command injection in Allied Telesis K.K. CentreCOM AR260S V2

Priority MEDIUM 41

OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2022-09-08 No fix listed CWE-78
Open these records in search →