Description
Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.
Published: 2014-12-19
Score: 10.0 Critical
EPSS: 8.4% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2014-7120 Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.
History

No history.

Subscriptions

Alliedtelesis Ar440s Ar440s Firmware Ar441s Ar441s Firmware Ar442s Ar442s Firmware Ar745 Ar745 Firmware Ar750s Ar750s-dp Ar750s-dp Firmware Ar750s Firmware At-8624poe At-8624poe Firmware At-8624t\/2m At-8624t\/2m Firmware At-8648t\/2sp At-8648t\/2sp Firmware At-8748xl At-8748xl Firmware At-8848 At-8848 Firmware At-9816gb At-9816gb Firmware At-9924t At-9924t Firmware At-9924ts At-9924ts Firmware Centrecom 8700sl Firmware Centrecom 8948xl Centrecom 8948xl Firmware Centrecom 9924sp Centrecom 9924sp Firmware Centrecom 9924t\/4sp Centrecom 9924t\/4sp Firmware Centrecom Ar415s Centrecom Ar415s Firmware Centrecom Ar450s Centrecom Ar450s Firmware Centrecom Ar550s Centrecom Ar550s Firmware Centrecom Ar570s Centrecom Ar570s Firmware Centrecom Ar8700sl Rapier 48i Rapier 48i Firmware Switchblade4000 Switchblade4000 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2024-08-06T12:40:19.261Z

Reserved: 2014-09-30T00:00:00.000Z

Link: CVE-2014-7249

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2014-12-19T11:59:01.400

Modified: 2025-04-12T10:46:40.837

Link: CVE-2014-7249

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses