CVE-2014-7249

Name: CVE-2014-7249
Creator: NVD / NIST
Published: 2014-12-19T11:59:01.4+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 6.13%

Last modified Jun 17, 2026

CVE-2014-7249 is a vulnerability of currently unknown severity. Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.. EPSS estimates a 6.13% chance of exploitation in the next 30 days.

Description

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

Metrics

EPSS Probability

6.13%

92.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Alliedtelesis	Centrecom Ar415s Firmware	<= 2.9.1-20
Alliedtelesis	Centrecom Ar415s	All versions
Alliedtelesis	At-8624t\/2m Firmware	<= 2.9.1-20
Alliedtelesis	At-8624t\/2m	All versions
Alliedtelesis	Ar442s Firmware	<= 2.9.1-20
Alliedtelesis	Ar442s	All versions
Alliedtelesis	At-9924t Firmware	<= 2.9.1-20
Alliedtelesis	At-9924t	All versions
Alliedtelesis	At-8848 Firmware	<= 2.9.1-20
Alliedtelesis	At-8848	All versions
Alliedtelesis	Rapier 48i Firmware	<= 2.9.1-20
Alliedtelesis	Rapier 48i	All versions
Alliedtelesis	Centrecom Ar450s Firmware	<= 2.9.1-20
Alliedtelesis	Centrecom Ar450s	All versions
Alliedtelesis	Ar745 Firmware	<= 2.9.1-20
Alliedtelesis	Ar745	All versions
Alliedtelesis	Ar441s Firmware	<= 2.9.1-20
Alliedtelesis	Ar441s	All versions
Alliedtelesis	Centrecom 9924sp Firmware	<= 2.9.1-20
Alliedtelesis	Centrecom 9924sp	All versions
Alliedtelesis	Switchblade4000 Firmware	<= 2.9.1-20
Alliedtelesis	Switchblade4000	All versions
Alliedtelesis	At-8624poe Firmware	<= 2.9.1-20
Alliedtelesis	At-8624poe	All versions
Alliedtelesis	Centrecom 9924t\/4sp Firmware	<= 2.9.1-20
Alliedtelesis	Centrecom 9924t\/4sp	All versions
Alliedtelesis	At-9816gb Firmware	<= 2.9.1-20
Alliedtelesis	At-9816gb	All versions
Alliedtelesis	At-9924ts Firmware	<= 2.9.1-20
Alliedtelesis	At-9924ts	All versions
Alliedtelesis	Ar750s Firmware	<= 2.9.1-20
Alliedtelesis	Ar750s	All versions
Alliedtelesis	Centrecom Ar570s Firmware	<= 2.9.1-20
Alliedtelesis	Centrecom Ar570s	All versions
Alliedtelesis	Centrecom 8948xl Firmware	<= 2.9.1-20
Alliedtelesis	Centrecom 8948xl	All versions
Alliedtelesis	At-8648t\/2sp Firmware	<= 2.9.1-20
Alliedtelesis	At-8648t\/2sp	All versions
Alliedtelesis	Centrecom 8700sl Firmware	<= 2.9.1-20
Alliedtelesis	Centrecom Ar8700sl	All versions
Alliedtelesis	Ar750s-Dp Firmware	<= 2.9.1-20
Alliedtelesis	Ar750s-Dp	All versions
Alliedtelesis	Centrecom Ar550s Firmware	<= 2.9.1-20
Alliedtelesis	Centrecom Ar550s	All versions
Alliedtelesis	At-8748xl Firmware	<= 2.9.1-20
Alliedtelesis	At-8748xl	All versions
Alliedtelesis	Ar440s Firmware	<= 2.9.1-20
Alliedtelesis	Ar440s	All versions

References

http://jvn.jp/en/jp/JVN22440986/index.htmlVendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132Vendor Advisory
http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.htmlVendor Advisory
http://jvn.jp/en/jp/JVN22440986/index.htmlVendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132Vendor Advisory
http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.htmlVendor Advisory

Timeline

Published: Dec 19, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-7249?

How severe is CVE-2014-7249?

Severity scoring for CVE-2014-7249 is pending analysis. The EPSS model estimates a 6.13% probability of exploitation in the next 30 days.

How do I fix CVE-2014-7249?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-7249?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST