CVE-2014-7249 Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, Cen...
HighCVSS 10.0
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alliedtelesis centrecom ar415s firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis centrecom ar415s | All versions | No fix listed |
| alliedtelesis at-8624t2m firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis at-8624t2m | All versions | No fix listed |
| alliedtelesis ar442s firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis ar442s | All versions | No fix listed |
| alliedtelesis at-9924t firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis at-9924t | All versions | No fix listed |
| alliedtelesis at-8848 firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis at-8848 | All versions | No fix listed |
| alliedtelesis rapier 48i firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis rapier 48i | All versions | No fix listed |
| alliedtelesis centrecom ar450s firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis centrecom ar450s | All versions | No fix listed |
| alliedtelesis ar745 firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis ar745 | All versions | No fix listed |
| alliedtelesis ar441s firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis ar441s | All versions | No fix listed |
| alliedtelesis centrecom 9924sp firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis centrecom 9924sp | All versions | No fix listed |
| alliedtelesis switchblade4000 firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis switchblade4000 | All versions | No fix listed |
| alliedtelesis at-8624poe firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis at-8624poe | All versions | No fix listed |
| alliedtelesis centrecom 9924t4sp firmware | <= 2.9.1-20 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alliedtelesis centrecom 9924t4sp | All versions | No fix listed |
| alliedtelesis at-9816gb firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis at-9816gb | All versions | No fix listed |
| alliedtelesis at-9924ts firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis at-9924ts | All versions | No fix listed |
| alliedtelesis ar750s firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis ar750s | All versions | No fix listed |
| alliedtelesis centrecom ar570s firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis centrecom ar570s | All versions | No fix listed |
| alliedtelesis centrecom 8948xl firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis centrecom 8948xl | All versions | No fix listed |
| alliedtelesis at-8648t2sp firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis at-8648t2sp | All versions | No fix listed |
| alliedtelesis centrecom 8700sl firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis centrecom ar8700sl | All versions | No fix listed |
| alliedtelesis ar750s-dp firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis ar750s-dp | All versions | No fix listed |
| alliedtelesis centrecom ar550s firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis centrecom ar550s | All versions | No fix listed |
| alliedtelesis at-8748xl firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis at-8748xl | All versions | No fix listed |
| alliedtelesis ar440s firmware | <= 2.9.1-20 | No fix listed |
| alliedtelesis ar440s | All versions | No fix listed |
References
- JVN#22440986 third-party-advisory vendor-advisory
- JVNDB-2014-000132 third-party-advisory vendor-advisory
- www.allied-telesis.co.jp vendor-advisory