CVE-2014-7249

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

• alliedtelesis centrecom ar415s firmware (<= 2.9.1-20) • alliedtelesis centrecom ar415s • alliedtelesis at-8624t\/2m firmware (<= 2.9.1-20) • alliedtelesis at-8624t\/2m • alliedtelesis ar442s firmware (<= 2.9.1-20) • alliedtelesis ar442s • alliedtelesis at-9924t firmware (<= 2.9.1-20) • alliedtelesis at-9924t • alliedtelesis at-8848 firmware (<= 2.9.1-20) • alliedtelesis at-8848 • alliedtelesis rapier 48i firmware (<= 2.9.1-20) • alliedtelesis rapier 48i • alliedtelesis centrecom ar450s firmware (<= 2.9.1-20) • alliedtelesis centrecom ar450s • alliedtelesis ar745 firmware (<= 2.9.1-20) • alliedtelesis ar745 • alliedtelesis ar441s firmware (<= 2.9.1-20) • alliedtelesis ar441s • alliedtelesis centrecom 9924sp firmware (<= 2.9.1-20) • alliedtelesis centrecom 9924sp • alliedtelesis switchblade4000 firmware (<= 2.9.1-20) • alliedtelesis switchblade4000 • alliedtelesis at-8624poe firmware (<= 2.9.1-20) • alliedtelesis at-8624poe • alliedtelesis centrecom 9924t\/4sp firmware (<= 2.9.1-20) • alliedtelesis centrecom 9924t\/4sp • alliedtelesis at-9816gb firmware (<= 2.9.1-20) • alliedtelesis at-9816gb • alliedtelesis at-9924ts firmware (<= 2.9.1-20) • alliedtelesis at-9924ts • alliedtelesis ar750s firmware (<= 2.9.1-20) • alliedtelesis ar750s • alliedtelesis centrecom ar570s firmware (<= 2.9.1-20) • alliedtelesis centrecom ar570s • alliedtelesis centrecom 8948xl firmware (<= 2.9.1-20) • alliedtelesis centrecom 8948xl • alliedtelesis at-8648t\/2sp firmware (<= 2.9.1-20) • alliedtelesis at-8648t\/2sp • alliedtelesis centrecom 8700sl firmware (<= 2.9.1-20) • alliedtelesis centrecom ar8700sl • alliedtelesis ar750s-dp firmware (<= 2.9.1-20) • alliedtelesis ar750s-dp • alliedtelesis centrecom ar550s firmware (<= 2.9.1-20) • alliedtelesis centrecom ar550s • alliedtelesis at-8748xl firmware (<= 2.9.1-20) • alliedtelesis at-8748xl • alliedtelesis ar440s firmware (<= 2.9.1-20) • alliedtelesis ar440s