Allied Telesis AT-GS950/8 Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ============================================= CVEID: CVE-2019-18922 NAME OF AFFECTED PRODUCT: Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 PROBLEM TYPE: Directory Traversal DESCRIPTION: A Directory Traversal in the Web interface...

CVE-2019-18922

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product...

CVE-2019-18922

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product...

Directory traversal

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product...

CVE-2019-18922

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product...

CVE-2019-18922

Allied Telesis AT-GS950/8 (firmware up to AT-S107 V.1.1.3) is affected by a Directory Traversal / Local File Inclusion via its web interface, enabling unauthenticated attackers to read arbitrary system files through a GET request. The vulnerability originates from insufficient path filtering, all...

PT-2019-15715

Name of the Vulnerable Software and Affected Versions Allied Telesis AT-GS950/8 versions prior to Firmware AT-S107 V.1.1.3 1.00.047 Description A Directory Traversal issue in the Web interface allows unauthenticated attackers to read arbitrary system files via a GET request. This issue affects an...

CVE-2019-18922: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 1.00.047 allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product...

Design/Logic Flaw

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4interface.php vlanid or subnetmask parameter...

CVE-2018-20503

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4interface.php vlanid or subnetmask parameter...

CVE-2018-20503

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4interface.php vlanid or subnetmask parameter...

CVE-2018-20503

CVE-2018-20503 is associated with an XSS flaw in Allied Telesis 8100L/8 devices, triggered by edits to IPv4 interface fields (edit-ipv4_interface.php) via the vlanid or subnet_mask parameters. The vulnerability arises from insufficient input validation in these parameters, with CVSS notes indicat...

PT-2019-10095

Name of the Vulnerable Software and Affected Versions: Allied Telesis 8100L/8 devices affected versions not specified Description: The issue allows for cross-site scripting XSS attacks. This is possible due to the lack of proper input validation in the vlanid or subnet mask parameters within the...

CVE-2018-20503: Improper Neutralization of Input During Web Page Generation

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4interface.php vlanid or subnetmask parameter...

telesis.com XSS vulnerability

Open Bug Bounty ID: OBB-625696 Description| Value ---|--- Affected Website:| telesis.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-7249

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM...

Buffer overflow

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM...

CVE-2014-7249

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM...

CVE-2014-7249

CVE-2014-7249 affects Allied Telesis/CentreCOM devices (AR/Router and related switches) with firmware before 2.9.1-21. A buffer overflow occurs when processing HTTP POST requests, enabling remote code execution. Affected products include AR440S/AR441S/AR442S/AR745/AR750S/AR750S-DP, AT-8624POE/2M,...

PT-2014-7855

Name of the Vulnerable Software and Affected Versions Allied Telesis AR440S versions prior to 2.9.1-21 Allied Telesis AR441S versions prior to 2.9.1-21 Allied Telesis AR442S versions prior to 2.9.1-21 Allied Telesis AR745 versions prior to 2.9.1-21 Allied Telesis AR750S versions prior to 2.9.1-21...