PT-2024-10928 · Allied Telesis · At-S115

Andrei Avadanei + 3 · Published 2024-03-28 · Updated 2024-08-01 · CVE-2021-31156

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Allied Telesis AT-S115 version 1.2.0 before 1.00.024 with Boot Loader 1.00.006

Description The issue allows Directory Traversal, which can lead to partial access to data.

Recommendations For Allied Telesis AT-S115 version 1.2.0 before 1.00.024 with Boot Loader 1.00.006, update to a version with Boot Loader 1.00.006 or later and firmware 1.00.024 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-31156

Affected Products

At-S115

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-31156 · Security Note
• https://twitter.com/CVEnew/status/1773483301971595642 · Twitter Post
• https://alliedtelesis.com/sites/default/files/documents/release-notes/ats115v120srna.pdf · Note
• https://t.me/cvenotify/75108 · Telegram Post
• https://alliedtelesis.com/en/documents/software-release-notes-s115-v120 · Note
• https://t.me/cvenotify/75059 · Telegram Post
• https://gist.github.com/NitescuLucian/69cf22d17bf190325118304be04828e8 · Note