Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Allied-telesis Subscribe
Filtered by product Centrecom Ar260s
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-34869 1 Allied-telesis 2 Centrecom Ar260s, Centrecom Ar260s Firmware 2022-09-13 N/A 8.8 HIGH
Undocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.
CVE-2022-38394 1 Allied-telesis 2 Centrecom Ar260s, Centrecom Ar260s Firmware 2022-09-13 N/A 9.8 CRITICAL
Use of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote unauthenticated attacker to execute an arbitrary OS command.
CVE-2022-38094 1 Allied-telesis 2 Centrecom Ar260s, Centrecom Ar260s Firmware 2022-09-13 N/A 8.8 HIGH
OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.
CVE-2022-35273 1 Allied-telesis 2 Centrecom Ar260s, Centrecom Ar260s Firmware 2022-09-13 N/A 8.8 HIGH
OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.