The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| At-9000_24_ethernetswitch | Alliedtelesyn | * | * |
References
- http://secunia.com/advisories/23451
- http://secunia.com/advisories/23590
- http://www.securityfocus.com/archive/1/454630/100/0/threaded
- http://www.securityfocus.com/bid/21628
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30924
- http://secunia.com/advisories/23451
- http://secunia.com/advisories/23590
- http://www.securityfocus.com/archive/1/454630/100/0/threaded
- http://www.securityfocus.com/bid/21628
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30924