kbrain

CVE-2014-7249

HIGH · CVSS 10.0EPSS 6.1%EU EUVD

Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

Key facts

CVSS score
10.0 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-119
EPSS score
6.1% (93th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2014-7120)
Published
December 19, 2014
NVD last modified
June 17, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-7120 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

  • alliedtelesis / ar440s
  • alliedtelesis / ar440s firmware
  • alliedtelesis / ar441s
  • alliedtelesis / ar441s firmware
  • alliedtelesis / ar442s
  • alliedtelesis / ar442s firmware
  • alliedtelesis / ar745
  • alliedtelesis / ar745 firmware
  • alliedtelesis / ar750s
  • alliedtelesis / ar750s firmware
  • alliedtelesis / ar750s-dp
  • alliedtelesis / ar750s-dp firmware
  • alliedtelesis / at-8624poe
  • alliedtelesis / at-8624poe firmware
  • alliedtelesis / at-8624t/2m
  • alliedtelesis / at-8624t/2m firmware
  • alliedtelesis / at-8648t/2sp
  • alliedtelesis / at-8648t/2sp firmware
  • alliedtelesis / at-8748xl
  • alliedtelesis / at-8748xl firmware
  • alliedtelesis / at-8848
  • alliedtelesis / at-8848 firmware
  • alliedtelesis / at-9816gb
  • alliedtelesis / at-9816gb firmware
  • alliedtelesis / at-9924t
  • alliedtelesis / at-9924t firmware
  • alliedtelesis / at-9924ts
  • alliedtelesis / at-9924ts firmware
  • alliedtelesis / centrecom 8700sl firmware
  • alliedtelesis / centrecom 8948xl
  • alliedtelesis / centrecom 8948xl firmware
  • alliedtelesis / centrecom 9924sp
  • alliedtelesis / centrecom 9924sp firmware
  • alliedtelesis / centrecom 9924t/4sp
  • alliedtelesis / centrecom 9924t/4sp firmware
  • alliedtelesis / centrecom ar415s
  • alliedtelesis / centrecom ar415s firmware
  • alliedtelesis / centrecom ar450s
  • alliedtelesis / centrecom ar450s firmware
  • alliedtelesis / centrecom ar550s
  • alliedtelesis / centrecom ar550s firmware
  • alliedtelesis / centrecom ar570s
  • alliedtelesis / centrecom ar570s firmware
  • alliedtelesis / centrecom ar8700sl
  • alliedtelesis / rapier 48i
  • alliedtelesis / rapier 48i firmware
  • alliedtelesis / switchblade4000
  • alliedtelesis / switchblade4000 firmware

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain