PatchTheCVE: allied-telesishttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-38394: Use of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.https://patchthecve.com/cve/CVE-2022-38394.htmlhttps://patchthecve.com/cve/CVE-2022-38394.htmlWed, 17 Jun 2026 04:56:31 +0000CRITICAL 9.8: Use of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote unauthenticated attacker to execute an arbitrary OS command.CVE-2022-38094: OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Vehttps://patchthecve.com/cve/CVE-2022-38094.htmlhttps://patchthecve.com/cve/CVE-2022-38094.htmlWed, 17 Jun 2026 04:56:05 +0000HIGH 8.8: OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.CVE-2022-35273: OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3https://patchthecve.com/cve/CVE-2022-35273.htmlhttps://patchthecve.com/cve/CVE-2022-35273.htmlWed, 17 Jun 2026 04:51:42 +0000HIGH 8.8: OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.CVE-2022-34869: Undocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2 firmware vershttps://patchthecve.com/cve/CVE-2022-34869.htmlhttps://patchthecve.com/cve/CVE-2022-34869.htmlWed, 17 Jun 2026 04:51:04 +0000HIGH 8.8: Undocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.