Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Allied-telesis Clear all filters
TI-2022-18020 CVE-2022-38394 · GHSA-x5m2-f2v4-5h4p

Hard-coded credentials in Allied Telesis K.K. CentreCOM AR260S V2

Priority MEDIUM 44

Use of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote unauthenticated attacker to execute an arbitrary OS command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01104 Published 2022-09-08 No fix listed CWE-798
TI-2022-17803 CVE-2022-38094 · GHSA-9v67-rxp6-5599

OS command injection in Allied Telesis K.K. CentreCOM AR260S V2

Priority MEDIUM 41

OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2022-09-08 No fix listed CWE-78
TI-2022-15952 CVE-2022-35273 · GHSA-g9jp-wj8f-h7fh

OS command injection in Allied Telesis K.K. CentreCOM AR260S V2

Priority MEDIUM 41

OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2022-09-08 No fix listed CWE-78