Vulnerability CVE-2014-7249


Published: 2014-12-19

Description:
Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Alliedtelesis -> Centrecom 9924sp 
Alliedtelesis -> At-8624t/2m firmware 
Alliedtelesis -> Switchblade4000 firmware 
Alliedtelesis -> Ar440s 
Alliedtelesis -> Centrecom 9924t/4sp 
Alliedtelesis -> At-8648t/2sp firmware 
Alliedtelesis -> Ar441s 
Alliedtelesis -> Centrecom ar415s 
Alliedtelesis -> At-8748xl firmware 
Alliedtelesis -> Ar442s 
Alliedtelesis -> Centrecom ar450s 
Alliedtelesis -> At-8848 firmware 
Alliedtelesis -> Ar745 
Alliedtelesis -> Centrecom ar550s 
Alliedtelesis -> At-9816gb firmware 
Alliedtelesis -> Ar750s 
Alliedtelesis -> Centrecom ar570s 
Alliedtelesis -> At-9924t firmware 
Alliedtelesis -> Ar750s-dp 
Alliedtelesis -> Centrecom ar8700sl 
Alliedtelesis -> At-9924ts firmware 
Alliedtelesis -> At-8624poe 
Alliedtelesis -> Rapier 48i 
Alliedtelesis -> Centrecom 8700sl firmware 
Alliedtelesis -> At-8624t/2m 
Alliedtelesis -> Switchblade4000 
Alliedtelesis -> Centrecom 8948xl firmware 
Alliedtelesis -> At-8648t/2sp 
Alliedtelesis -> Ar440s firmware 
Alliedtelesis -> Centrecom 9924sp firmware 
Alliedtelesis -> At-8748xl 
Alliedtelesis -> Ar441s firmware 
Alliedtelesis -> Centrecom 9924t/4sp firmware 
Alliedtelesis -> At-8848 
Alliedtelesis -> Ar442s firmware 
Alliedtelesis -> Centrecom ar415s firmware 
Alliedtelesis -> At-9816gb 
Alliedtelesis -> Ar745 firmware 
Alliedtelesis -> Centrecom ar450s firmware 
Alliedtelesis -> At-9924t 
Alliedtelesis -> Ar750s-dp firmware 
Alliedtelesis -> Centrecom ar550s firmware 
Alliedtelesis -> At-9924ts 
Alliedtelesis -> Ar750s firmware 
Alliedtelesis -> Centrecom ar570s firmware 
Alliedtelesis -> Centrecom 8948xl 
Alliedtelesis -> At-8624poe firmware 
Alliedtelesis -> Rapier 48i firmware 

 References:
http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132
http://jvn.jp/en/jp/JVN22440986/index.html

Copyright 2021, cxsecurity.com

 

Back to Top