What’s Vulnerable › Vulnerabilities

CVE-2014-7249

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-12-19 · updated 2026-06-17
• Weakness: CWE-119

Description

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

Affected products

• Alliedtelesis Ar440S: all versions
• Alliedtelesis Ar440S Firmware: through 2.9.1-20
• Alliedtelesis Ar441S: all versions
• Alliedtelesis Ar441S Firmware: through 2.9.1-20
• Alliedtelesis Ar442S: all versions
• Alliedtelesis Ar442S Firmware: through 2.9.1-20
• Alliedtelesis Ar745: all versions
• Alliedtelesis Ar745 Firmware: through 2.9.1-20
• Alliedtelesis Ar750S: all versions
• Alliedtelesis Ar750S-Dp: all versions
• Alliedtelesis Ar750S-Dp Firmware: through 2.9.1-20
• Alliedtelesis Ar750S Firmware: through 2.9.1-20
• Alliedtelesis At-8624Poe: all versions
• Alliedtelesis At-8624Poe Firmware: through 2.9.1-20
• Alliedtelesis At-8624T/2M: all versions
• Alliedtelesis At-8624T/2M Firmware: through 2.9.1-20
• Alliedtelesis At-8648T/2Sp: all versions
• Alliedtelesis At-8648T/2Sp Firmware: through 2.9.1-20
• Alliedtelesis At-8748Xl: all versions
• Alliedtelesis At-8748Xl Firmware: through 2.9.1-20
• Alliedtelesis At-8848: all versions
• Alliedtelesis At-8848 Firmware: through 2.9.1-20
• Alliedtelesis At-9816Gb: all versions
• Alliedtelesis At-9816Gb Firmware: through 2.9.1-20
• Alliedtelesis At-9924T: all versions
• Alliedtelesis At-9924T Firmware: through 2.9.1-20
• Alliedtelesis At-9924Ts: all versions
• Alliedtelesis At-9924Ts Firmware: through 2.9.1-20
• Alliedtelesis Centrecom 8700Sl Firmware: through 2.9.1-20
• Alliedtelesis Centrecom 8948Xl: all versions

References

• http://jvn.jp/en/jp/JVN22440986/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132
• http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html
• http://jvn.jp/en/jp/JVN22440986/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132
• http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html

Get alerted when CVE-2014-7249 or the next vulnerability affects your stack