Command injection

2022-09-0808:15:00

PRIOn knowledge base

www.prio-n.com

command injection

telnet vulnerability

centrecom ar260s

firmware vulnerability

remote attacker

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

JSON

OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.

CPENameOperatorVersion
centrecom_ar260s_firmwarelt3.3.7

CPE	Name	Operator	Version
	centrecom_ar260s_firmware	lt	3.3.7

References

jvn.jp/en/jp/JVN45473612/index.html

www.allied-telesis.co.jp/support/list/faq/vuls/20220829.html