cve/2019/CVE-2019-18922.md

CVE-2019-18922

Description

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product.

POC

Reference

• http://packetstormsecurity.com/files/155504/Allied-Telesis-AT-GS950-8-Directory-Traversal.html

Github

• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/StarCrossPortal/scalpel
• https://github.com/anonymous364872/Rapier_Tool
• https://github.com/apif-review/APIF_tool_2024
• https://github.com/youcans896768/APIV_Tool