Read the docs
TI-2014-06034 Aliases CVE-2014-7249GHSA-r2p3-v7r6-vhc6

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP…

Priority MEDIUM 52CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

Why it matters now

EPSS 0.06131 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 48

CPEVersionsRoleVendor
cpe:2.3:o:alliedtelesis:centrecom_ar415s_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:centrecom_ar415s:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:at-8624t\/2m_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:at-8624t\/2m:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:ar442s_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:ar442s:-:*:*:*:*:*:*:*not specified by NVDVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:at-9924t_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:at-9924t:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:at-8848_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:at-8848:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
  • cpe:2.3:o:alliedtelesis:centrecom_ar415s_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:centrecom_ar415s:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:at-8624t\/2m_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:at-8624t\/2m:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:ar442s_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:ar442s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:at-9924t_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:at-9924t:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:at-8848_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:at-8848:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
Show 38 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:alliedtelesis:rapier_48i_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:rapier_48i:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:centrecom_ar450s_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:centrecom_ar450s:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:ar745_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:ar745:-:*:*:*:*:*:*:*not specified by NVDVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:ar441s_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:ar441s:-:*:*:*:*:*:*:*not specified by NVDVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:centrecom_9924sp_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:centrecom_9924sp:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:switchblade4000_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:switchblade4000:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:at-8624poe_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:at-8624poe:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:centrecom_9924t\/4sp_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:centrecom_9924t\/4sp:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:at-9816gb_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:at-9816gb:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:at-9924ts_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:at-9924ts:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:ar750s_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:ar750s:-:*:*:*:*:*:*:*not specified by NVDVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:centrecom_ar570s_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:centrecom_ar570s:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:centrecom_8948xl_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:centrecom_8948xl:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:at-8648t\/2sp_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:at-8648t\/2sp:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:centrecom_8700sl_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:centrecom_ar8700sl:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:ar750s-dp_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:ar750s-dp:-:*:*:*:*:*:*:*not specified by NVDVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:centrecom_ar550s_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:centrecom_ar550s:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:at-8748xl_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:at-8748xl:*:*:*:*:*:*:*:*all versionsVulnerableAlliedtelesis
cpe:2.3:o:alliedtelesis:ar440s_firmware:*:*:*:*:*:*:*:*up to 2.9.1-20VulnerableAlliedtelesis
cpe:2.3:h:alliedtelesis:ar440s:-:*:*:*:*:*:*:*not specified by NVDVulnerableAlliedtelesis
  • cpe:2.3:o:alliedtelesis:rapier_48i_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:rapier_48i:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:centrecom_ar450s_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:centrecom_ar450s:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:ar745_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:ar745:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:ar441s_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:ar441s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:centrecom_9924sp_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:centrecom_9924sp:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:switchblade4000_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:switchblade4000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:at-8624poe_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:at-8624poe:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:centrecom_9924t\/4sp_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:centrecom_9924t\/4sp:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:at-9816gb_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:at-9816gb:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:at-9924ts_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:at-9924ts:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:ar750s_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:ar750s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:centrecom_ar570s_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:centrecom_ar570s:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:centrecom_8948xl_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:centrecom_8948xl:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:at-8648t\/2sp_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:at-8648t\/2sp:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:centrecom_8700sl_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:centrecom_ar8700sl:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:ar750s-dp_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:ar750s-dp:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:centrecom_ar550s_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:centrecom_ar550s:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:at-8748xl_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:at-8748xl:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Alliedtelesis
  • cpe:2.3:o:alliedtelesis:ar440s_firmware:*:*:*:*:*:*:*:* Versions up to 2.9.1-20 Vulnerable ·Alliedtelesis
  • cpe:2.3:h:alliedtelesis:ar440s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Alliedtelesis

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-7249
  2. 2026-10-03 Alias added: GHSA-r2p3-v7r6-vhc6

References

Advisory 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences