CVE-2022-35273

—

CVSS 3.1

8.8 high

EPSS

2%p74

Published

Sep 8, 2022 (Sep 8, 2022)

Modified

Jun 17, 2026

Description

OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command.

Vendors: allied-telesis
Products: centrecom ar260s firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.