PatchTheCVEalliedtelesis vulnerabilities
Recent CVEs affecting alliedtelesis products. 2 tracked.
alliedtelesis has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-11-29. Highest priority: CVE-2019-18922 (score 56/100).
- CVE-2019-18922 HIGH 7.5 UPGRADE A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.
- CVE-2018-20503 MEDIUM 6.1 MITIGATE Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.
FAQ
How do I fix alliedtelesis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is alliedtelesis being exploited right now?
None of the tracked alliedtelesis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which alliedtelesis CVE should I patch first?
CVE-2019-18922 currently ranks highest (56/100): A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1..