CVE Feed

    Dashboard / CVE / CVE-2014-7249

    CVE-2014-7249

    Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

    Published:Dec 19, 2014
    Last Modified:Apr 12, 2025
    EPS:Dec 19, 2014
    EPSS Score:0.08447
    CVSS Score:10

    Affected Products

    Vendor
    Alliedtelesis
    Product
    Ar440s
    Vendor
    Alliedtelesis
    Product
    Ar440s Firmware
    Vendor
    Alliedtelesis
    Product
    Ar441s
    Vendor
    Alliedtelesis
    Product
    Ar441s Firmware
    Vendor
    Alliedtelesis
    Product
    Ar442s
    Vendor
    Alliedtelesis
    Product
    Ar442s Firmware
    Vendor
    Alliedtelesis
    Product
    Ar745
    Vendor
    Alliedtelesis
    Product
    Ar745 Firmware
    Vendor
    Alliedtelesis
    Product
    Ar750s
    Vendor
    Alliedtelesis
    Product
    Ar750s-dp
    Vendor
    Alliedtelesis
    Product
    Ar750s-dp Firmware
    Vendor
    Alliedtelesis
    Product
    Ar750s Firmware
    Vendor
    Alliedtelesis
    Product
    At-8624poe
    Vendor
    Alliedtelesis
    Product
    At-8624poe Firmware
    Vendor
    Alliedtelesis
    Product
    At-8624t\/2m
    Vendor
    Alliedtelesis
    Product
    At-8624t\/2m Firmware
    Vendor
    Alliedtelesis
    Product
    At-8648t\/2sp
    Vendor
    Alliedtelesis
    Product
    At-8648t\/2sp Firmware
    Vendor
    Alliedtelesis
    Product
    At-8748xl
    Vendor
    Alliedtelesis
    Product
    At-8748xl Firmware
    Vendor
    Alliedtelesis
    Product
    At-8848
    Vendor
    Alliedtelesis
    Product
    At-8848 Firmware
    Vendor
    Alliedtelesis
    Product
    At-9816gb
    Vendor
    Alliedtelesis
    Product
    At-9816gb Firmware
    Vendor
    Alliedtelesis
    Product
    At-9924t
    Vendor
    Alliedtelesis
    Product
    At-9924t Firmware
    Vendor
    Alliedtelesis
    Product
    At-9924ts
    Vendor
    Alliedtelesis
    Product
    At-9924ts Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom 8700sl Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom 8948xl
    Vendor
    Alliedtelesis
    Product
    Centrecom 8948xl Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom 9924sp
    Vendor
    Alliedtelesis
    Product
    Centrecom 9924sp Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom 9924t\/4sp
    Vendor
    Alliedtelesis
    Product
    Centrecom 9924t\/4sp Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar415s
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar415s Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar450s
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar450s Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar550s
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar550s Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar570s
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar570s Firmware
    Vendor
    Alliedtelesis
    Product
    Centrecom Ar8700sl
    Vendor
    Alliedtelesis
    Product
    Rapier 48i
    Vendor
    Alliedtelesis
    Product
    Rapier 48i Firmware
    Vendor
    Alliedtelesis
    Product
    Switchblade4000
    Vendor
    Alliedtelesis
    Product
    Switchblade4000 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High