Allied Telesis AT-GS950/8 Directory Traversal Vulnerability

Exploit for hardware platform in category web applications ============================================= CVEID: CVE-2019-18922 NAME OF AFFECTED PRODUCT: Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 PROBLEM TYPE: Directory Traversal DESCRIPTION: A Directory Traversal in the We...

Allied Telesis AT-GS950/8 Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ============================================= CVEID: CVE-2019-18922 NAME OF AFFECTED PRODUCT: Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 PROBLEM TYPE: Directory Traversal DESCRIPTION: A Directory Traversal in the Web interface...

CVE-2019-18922

Allied Telesis AT-GS950/8 (firmware up to AT-S107 V.1.1.3) is affected by a Directory Traversal / Local File Inclusion via its web interface, enabling unauthenticated attackers to read arbitrary system files through a GET request. The vulnerability originates from insufficient path filtering, all...

CVE-2019-18922

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product...

PT-2019-15715

Name of the Vulnerable Software and Affected Versions Allied Telesis AT-GS950/8 versions prior to Firmware AT-S107 V.1.1.3 1.00.047 Description A Directory Traversal issue in the Web interface allows unauthenticated attackers to read arbitrary system files via a GET request. This issue affects an...

CVE-2019-18922: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product...