CVE-2014-7249: Alliedtelesis AR440S

High severity, CVSS 10.0. EPSS: 6.1% chance of exploitation in the next 30 days.

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

Affected products

• Alliedtelesis AR440S
• Alliedtelesis AR440S Firmware: up to and including 2.9.1-20
• Alliedtelesis AR441S
• Alliedtelesis AR441S Firmware: up to and including 2.9.1-20
• Alliedtelesis AR442S
• Alliedtelesis AR442S Firmware: up to and including 2.9.1-20
• Alliedtelesis AR745
• Alliedtelesis AR745 Firmware: up to and including 2.9.1-20
• Alliedtelesis AR750S
• Alliedtelesis AR750S-Dp
• Alliedtelesis AR750S-Dp Firmware: up to and including 2.9.1-20
• Alliedtelesis AR750S Firmware: up to and including 2.9.1-20
• Alliedtelesis At-8624poe
• Alliedtelesis At-8624poe Firmware: up to and including 2.9.1-20
• Alliedtelesis At-8624t/2m
• Alliedtelesis At-8624t/2m Firmware: up to and including 2.9.1-20
• Alliedtelesis At-8648t/2sp
• Alliedtelesis At-8648t/2sp Firmware: up to and including 2.9.1-20
• Alliedtelesis At-8748xl
• Alliedtelesis At-8748xl Firmware: up to and including 2.9.1-20
• Alliedtelesis At-8848
• Alliedtelesis At-8848 Firmware: up to and including 2.9.1-20
• Alliedtelesis At-9816gb
• Alliedtelesis At-9816gb Firmware: up to and including 2.9.1-20
• Alliedtelesis At-9924t
• and 23 more

Published 2014-12-19. Last modified 2026-06-17.