High severity7.5NVD Advisory· Published Nov 29, 2019· Updated Jun 17, 2026

CVE-2019-18922

Description

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated attackers to read arbitrary system files via a GET request. NOTE: This is an End-of-Life product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Allied Telesis/AT-GS950/8description
Allied Telesis/AT-GS950/8llm-fuzzy
Range: <= AT-S107 V.1.1.3 [1.00.047]

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/155504/Allied-Telesis-AT-GS950-8-Directory-Traversal.htmlnvdThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2019/Nov/31nvdMailing ListThird Party Advisory
pastebin.com/dpEGKUGznvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.020
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000