alliedtelesis vulnerabilities

Products

• 8100l8 firmware 1
• ar440s 1
• ar440s firmware 1
• ar441s 1
• ar441s firmware 1
• ar442s 1
• ar442s firmware 1
• ar745 1
• ar745 firmware 1
• ar750s 1
• ar750s firmware 1
• ar750s-dp 1
• ar750s-dp firmware 1
• at-8624poe 1
• at-8624poe firmware 1
• at-8624t2m 1
• at-8624t2m firmware 1
• at-8648t2sp 1
• at-8648t2sp firmware 1
• at-8748xl 1
• at-8748xl firmware 1
• at-8848 1
• at-8848 firmware 1
• at-9816gb 1
• at-9816gb firmware 1
• at-9924t 1
• at-9924t firmware 1
• at-9924ts 1
• at-9924ts firmware 1
• at-gs9508 firmware 1

Latest alliedtelesis CVEs

Newest publication first

1. CVE-2019-18922 A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated attackers to read arbitrary system files via a GET request....

   Published 2019-11-29

   High·CVSS 7.5 EPSS 23.5%

   A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product.

2. CVE-2018-20503 Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.

   Published 2019-05-07

   Medium·CVSS 6.1 EPSS 3.9%

   Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.

3. CVE-2014-7249 Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, Cen...

   Published 2014-12-19

   High·CVSS 10.0 EPSS 6.1%

   Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8...

4. CVE-2014-1982 The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges a...

   Published 2014-03-28

   High·CVSS 10.0 EPSS 9.4%

   The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.