Command injection

2022-09-0808:15:00

PRIOn knowledge base

www.prio-n.com

command injection

telnet

remote attacker

arbitrary command

8.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

Undocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.

CPENameOperatorVersion
centrecom_ar260s_firmwarelt3.3.7

CPE	Name	Operator	Version
	centrecom_ar260s_firmware	lt	3.3.7

References

jvn.jp/en/jp/JVN45473612/index.html

www.allied-telesis.co.jp/support/list/faq/vuls/20220829.html