critical10.0
CVE-2014-7249
Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, A…
Impact
Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alliedtelesis | Centrecom Ar415s Firmware | through 2.9.1-20 |
| Alliedtelesis | Centrecom Ar415s | All versions |
| Alliedtelesis | At-8624t\/2m Firmware | through 2.9.1-20 |
| Alliedtelesis | At-8624t\/2m | All versions |
| Alliedtelesis | Ar442s Firmware | through 2.9.1-20 |
| Alliedtelesis | Ar442s | All versions |
| Alliedtelesis | At-9924t Firmware | through 2.9.1-20 |
| Alliedtelesis | At-9924t | All versions |
| Alliedtelesis | At-8848 Firmware | through 2.9.1-20 |
| Alliedtelesis | At-8848 | All versions |
| Alliedtelesis | Rapier 48i Firmware | through 2.9.1-20 |
| Alliedtelesis | Rapier 48i | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN22440986/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132
- http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html
- http://jvn.jp/en/jp/JVN22440986/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132
- http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html