10

CVE-2014-7249

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Alliedtelesis ≫ Centrecom Ar415s Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar442s Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar442s Version -
Alliedtelesis ≫ At-9924t Firmware Version <= 2.9.1-20
Alliedtelesis ≫ At-8848 Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Rapier 48i Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Centrecom Ar450s Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar745 Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar745 Version -
Alliedtelesis ≫ Ar441s Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar441s Version -
Alliedtelesis ≫ Centrecom 9924sp Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Switchblade4000 Firmware Version <= 2.9.1-20
Alliedtelesis ≫ At-8624poe Firmware Version <= 2.9.1-20
Alliedtelesis ≫ At-9816gb Firmware Version <= 2.9.1-20
Alliedtelesis ≫ At-9924ts Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar750s Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar750s Version -
Alliedtelesis ≫ Centrecom Ar570s Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Centrecom 8948xl Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Centrecom 8700sl Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar750s-dp Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar750s-dp Version -
Alliedtelesis ≫ Centrecom Ar550s Firmware Version <= 2.9.1-20
Alliedtelesis ≫ At-8748xl Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar440s Firmware Version <= 2.9.1-20
Alliedtelesis ≫ Ar440s Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.13% 0.925
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://jvn.jp/en/jp/JVN22440986/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132
Vendor Advisory
http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html
Vendor Advisory