Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-7249 Details

Description

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132	CVE	Vendor Advisory
http://jvn.jp/en/jp/JVN22440986/index.html	CVE	Vendor Advisory
http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html	CVE	Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132	[email protected]	Vendor Advisory
http://jvn.jp/en/jp/JVN22440986/index.html	[email protected]	Vendor Advisory
http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html	[email protected]	Vendor Advisory

see all 6 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
alliedtelesis centrecom ar415s firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:centrecom_ar415s_firmware:::::::: Remediation No remediation found in references.
alliedtelesis centrecom ar415s	All versions
CPE cpe:2.3:h:alliedtelesis:centrecom_ar415s:::::::: Remediation No remediation found in references.
alliedtelesis at-8624t/2m firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:at-8624t/2m_firmware:::::::: Remediation No remediation found in references.
alliedtelesis at-8624t/2m	All versions
CPE cpe:2.3:h:alliedtelesis:at-8624t/2m:::::::: Remediation No remediation found in references.
alliedtelesis ar442s firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:ar442s_firmware:::::::: Remediation No remediation found in references.
alliedtelesis ar442s	All versions
CPE cpe:2.3:h:alliedtelesis:ar442s:-:::::::* Remediation No remediation found in references.
alliedtelesis at-9924t firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:at-9924t_firmware:::::::: Remediation No remediation found in references.
alliedtelesis at-9924t	All versions
CPE cpe:2.3:h:alliedtelesis:at-9924t:::::::: Remediation No remediation found in references.
alliedtelesis at-8848 firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:at-8848_firmware:::::::: Remediation No remediation found in references.
alliedtelesis at-8848	All versions
CPE cpe:2.3:h:alliedtelesis:at-8848:::::::: Remediation No remediation found in references.
alliedtelesis rapier 48i firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:rapier_48i_firmware:::::::: Remediation No remediation found in references.
alliedtelesis rapier 48i	All versions
CPE cpe:2.3:h:alliedtelesis:rapier_48i:::::::: Remediation No remediation found in references.
alliedtelesis centrecom ar450s firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:centrecom_ar450s_firmware:::::::: Remediation No remediation found in references.
alliedtelesis centrecom ar450s	All versions
CPE cpe:2.3:h:alliedtelesis:centrecom_ar450s:::::::: Remediation No remediation found in references.
alliedtelesis ar745 firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:ar745_firmware:::::::: Remediation No remediation found in references.
alliedtelesis ar745	All versions
CPE cpe:2.3:h:alliedtelesis:ar745:-:::::::* Remediation No remediation found in references.
alliedtelesis ar441s firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:ar441s_firmware:::::::: Remediation No remediation found in references.
alliedtelesis ar441s	All versions
CPE cpe:2.3:h:alliedtelesis:ar441s:-:::::::* Remediation No remediation found in references.
alliedtelesis centrecom 9924sp firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:centrecom_9924sp_firmware:::::::: Remediation No remediation found in references.
alliedtelesis centrecom 9924sp	All versions
CPE cpe:2.3:h:alliedtelesis:centrecom_9924sp:::::::: Remediation No remediation found in references.
alliedtelesis switchblade4000 firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:switchblade4000_firmware:::::::: Remediation No remediation found in references.
alliedtelesis switchblade4000	All versions
CPE cpe:2.3:h:alliedtelesis:switchblade4000:::::::: Remediation No remediation found in references.
alliedtelesis at-8624poe firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:at-8624poe_firmware:::::::: Remediation No remediation found in references.
alliedtelesis at-8624poe	All versions
CPE cpe:2.3:h:alliedtelesis:at-8624poe:::::::: Remediation No remediation found in references.
alliedtelesis centrecom 9924t/4sp firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:centrecom_9924t/4sp_firmware:::::::: Remediation No remediation found in references.
alliedtelesis centrecom 9924t/4sp	All versions
CPE cpe:2.3:h:alliedtelesis:centrecom_9924t/4sp:::::::: Remediation No remediation found in references.
alliedtelesis at-9816gb firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:at-9816gb_firmware:::::::: Remediation No remediation found in references.
alliedtelesis at-9816gb	All versions
CPE cpe:2.3:h:alliedtelesis:at-9816gb:::::::: Remediation No remediation found in references.
alliedtelesis at-9924ts firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:at-9924ts_firmware:::::::: Remediation No remediation found in references.
alliedtelesis at-9924ts	All versions
CPE cpe:2.3:h:alliedtelesis:at-9924ts:::::::: Remediation No remediation found in references.
alliedtelesis ar750s firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:ar750s_firmware:::::::: Remediation No remediation found in references.
alliedtelesis ar750s	All versions
CPE cpe:2.3:h:alliedtelesis:ar750s:-:::::::* Remediation No remediation found in references.
alliedtelesis centrecom ar570s firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:centrecom_ar570s_firmware:::::::: Remediation No remediation found in references.
alliedtelesis centrecom ar570s	All versions
CPE cpe:2.3:h:alliedtelesis:centrecom_ar570s:::::::: Remediation No remediation found in references.
alliedtelesis centrecom 8948xl firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:centrecom_8948xl_firmware:::::::: Remediation No remediation found in references.
alliedtelesis centrecom 8948xl	All versions
CPE cpe:2.3:h:alliedtelesis:centrecom_8948xl:::::::: Remediation No remediation found in references.
alliedtelesis at-8648t/2sp firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:at-8648t/2sp_firmware:::::::: Remediation No remediation found in references.
alliedtelesis at-8648t/2sp	All versions
CPE cpe:2.3:h:alliedtelesis:at-8648t/2sp:::::::: Remediation No remediation found in references.
alliedtelesis centrecom 8700sl firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:centrecom_8700sl_firmware:::::::: Remediation No remediation found in references.
alliedtelesis centrecom ar8700sl	All versions
CPE cpe:2.3:h:alliedtelesis:centrecom_ar8700sl:::::::: Remediation No remediation found in references.
alliedtelesis ar750s-dp firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:ar750s-dp_firmware:::::::: Remediation No remediation found in references.
alliedtelesis ar750s-dp	All versions
CPE cpe:2.3:h:alliedtelesis:ar750s-dp:-:::::::* Remediation No remediation found in references.
alliedtelesis centrecom ar550s firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:centrecom_ar550s_firmware:::::::: Remediation No remediation found in references.
alliedtelesis centrecom ar550s	All versions
CPE cpe:2.3:h:alliedtelesis:centrecom_ar550s:::::::: Remediation No remediation found in references.
alliedtelesis at-8748xl firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:at-8748xl_firmware:::::::: Remediation No remediation found in references.
alliedtelesis at-8748xl	All versions
CPE cpe:2.3:h:alliedtelesis:at-8748xl:::::::: Remediation No remediation found in references.
alliedtelesis ar440s firmware	<= 2.9.1-20
CPE cpe:2.3:o:alliedtelesis:ar440s_firmware:::::::: Remediation No remediation found in references.
alliedtelesis ar440s	All versions
CPE cpe:2.3:h:alliedtelesis:ar440s:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 6, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Dec 19, 2014	Modified Analysis	[email protected]
Dec 19, 2014	Initial Analysis	[email protected]

CVE-2014-7249 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation