FKIE_CVE-2014-7249

Vulnerability from fkie_nvd - Published: 2014-12-19 11:59 - Updated: 2026-06-17 00:14
Severity
Summary
Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.
Impacted products
Vendor Product Version
alliedtelesis centrecom_ar415s_firmware *
alliedtelesis centrecom_ar415s *
alliedtelesis at-8624t\/2m_firmware *
alliedtelesis at-8624t\/2m *
alliedtelesis ar442s_firmware *
alliedtelesis ar442s -
alliedtelesis at-9924t_firmware *
alliedtelesis at-9924t *
alliedtelesis at-8848_firmware *
alliedtelesis at-8848 *
alliedtelesis rapier_48i_firmware *
alliedtelesis rapier_48i *
alliedtelesis centrecom_ar450s_firmware *
alliedtelesis centrecom_ar450s *
alliedtelesis ar745_firmware *
alliedtelesis ar745 -
alliedtelesis ar441s_firmware *
alliedtelesis ar441s -
alliedtelesis centrecom_9924sp_firmware *
alliedtelesis centrecom_9924sp *
alliedtelesis switchblade4000_firmware *
alliedtelesis switchblade4000 *
alliedtelesis at-8624poe_firmware *
alliedtelesis at-8624poe *
alliedtelesis centrecom_9924t\/4sp_firmware *
alliedtelesis centrecom_9924t\/4sp *
alliedtelesis at-9816gb_firmware *
alliedtelesis at-9816gb *
alliedtelesis at-9924ts_firmware *
alliedtelesis at-9924ts *
alliedtelesis ar750s_firmware *
alliedtelesis ar750s -
alliedtelesis centrecom_ar570s_firmware *
alliedtelesis centrecom_ar570s *
alliedtelesis centrecom_8948xl_firmware *
alliedtelesis centrecom_8948xl *
alliedtelesis at-8648t\/2sp_firmware *
alliedtelesis at-8648t\/2sp *
alliedtelesis centrecom_8700sl_firmware *
alliedtelesis centrecom_ar8700sl *
alliedtelesis ar750s-dp_firmware *
alliedtelesis ar750s-dp -
alliedtelesis centrecom_ar550s_firmware *
alliedtelesis centrecom_ar550s *
alliedtelesis at-8748xl_firmware *
alliedtelesis at-8748xl *
alliedtelesis ar440s_firmware *
alliedtelesis ar440s -

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:centrecom_ar415s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6790CB5F-F5E2-4276-B3CA-7FA46878B569",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:centrecom_ar415s:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C77F0C7-CE53-46E5-BB5D-5F947A6A8429",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-8624t\\/2m_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFD12D46-E5A2-46A3-BE9F-931E7DB4C210",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-8624t\\/2m:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECBDA7EA-09D6-4874-A9D1-0181AF97CC7F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:ar442s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C7ACB87-0EAB-4A41-AA41-5913A99E213C",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:ar442s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "12592CF4-C917-4270-9E58-8B530507327F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-9924t_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B11EA4A9-C569-4F50-8962-D0ECF6E3155F",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-9924t:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB289C3A-B506-41DE-98B3-EF1A221A282A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-8848_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E2663DA-B4E3-411E-85B1-B52579F29648",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-8848:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFDC6607-91AD-46AC-810D-C7A7F214CEDA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:rapier_48i_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "099A272B-6803-49D5-91C9-D407FA768FC9",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:rapier_48i:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DB3C344-E2F8-4B44-8DB3-9CDC440A7A3A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:centrecom_ar450s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E913B84C-76AE-4977-8AA1-B4DF719D8D95",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:centrecom_ar450s:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC7212C5-F3DA-4FD0-B5F0-A17B33890AFB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:ar745_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "160495A1-0720-4AF6-88A1-FC35C5590A90",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:ar745:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "01A5F497-AD41-4B17-9512-E51C67BE5FA9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:ar441s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E41E7B4-3938-4462-814B-C0D2651300A9",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:ar441s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA421FDA-4ED3-4EA9-882C-D324378E2B4C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:centrecom_9924sp_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "28FF1C34-4434-46AA-848B-99CA26AEEB9E",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:centrecom_9924sp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "891B0B06-B1A7-4C74-8C36-9765167F0B5B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:switchblade4000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "845E30B2-E656-4A41-AB3A-08A626AF9C79",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:switchblade4000:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE5C3C0B-FCD2-4554-842C-9FFFC90FF27D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-8624poe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9408776-E700-4C0B-90C4-B1D9196E51E6",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-8624poe:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "45866236-EA04-4874-81FA-C8DC0563A1B6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:centrecom_9924t\\/4sp_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CB728D8-0DB3-4ED7-905C-C6A99DB7B59D",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:centrecom_9924t\\/4sp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F6BDF0D-9BB7-47DA-991A-C87CC60C80B9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-9816gb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "445007A4-FAAF-4CB0-B80F-57FE389E5C30",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-9816gb:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC17B2B0-1795-4528-B997-DEAEF3BCCF0E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-9924ts_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "97AE756A-FDC5-4F78-B5A2-1F0BA76336F4",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-9924ts:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BB7E5CD-B66F-434B-83C1-F31ADB903186",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:ar750s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1EB5160-2D62-4AC6-8F36-429936A18546",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:ar750s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "435E4169-F025-4194-ACA2-FE2CCF6F2F4E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:centrecom_ar570s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "80AA0879-B180-4A28-A059-9C6F9E50A58F",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:centrecom_ar570s:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "01ECC037-75DD-452D-AAD1-5678E8D11845",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:centrecom_8948xl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "611FF70C-9A67-48F3-8D52-C70FBA02D83F",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:centrecom_8948xl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E02ED13-C13C-4F06-A4BF-85C72A6B0F15",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-8648t\\/2sp_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "965C6820-A8F7-4FBF-B2CF-BB075B1DF596",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-8648t\\/2sp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "14124400-8FEF-4142-817A-540B2EB15BD5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:centrecom_8700sl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "424A4E44-B707-40E5-9343-30255693E218",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:centrecom_ar8700sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "878A6AA2-4BEF-4BAC-9799-CE202DB47FBC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:ar750s-dp_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDAC60F8-2E66-4F59-B29C-106C9239AB46",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:ar750s-dp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F34FFA3-4CBA-4C3A-ABD0-DE3AB90FF70F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:centrecom_ar550s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1AC86538-F3FE-4139-8A69-AABBE25B7EAC",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:centrecom_ar550s:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7353EADC-20ED-4F5C-ACC2-4201FFAF8CBB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-8748xl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D55C6251-2F67-47AA-AD07-7ADF6BE65817",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-8748xl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "80E859F2-79EC-4D79-B57D-252D2BE9CB4F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:ar440s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FBE91F0-47A0-4FE7-BFBD-55839DFC38EB",
              "versionEndIncluding": "2.9.1-20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:ar440s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5619B8C4-40F4-44AF-BA6C-1E85A1272881",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de memoria en los Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i y SwitchBlade4000 con el firmware anterior a 2.9.1-21 permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de peticiones HTTP POST manipulada."
    }
  ],
  "id": "CVE-2014-7249",
  "lastModified": "2026-06-17T00:14:37.717",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-12-19T11:59:01.400",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvn.jp/en/jp/JVN22440986/index.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvn.jp/en/jp/JVN22440986/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…