Description
The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations.
References
- 20061216 Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs. mailing-list
- 23590 third-party-advisory
- 21628 vdb-entry
- 23451 third-party-advisory
- alliedtelesis-vlan-security-bypass(30924) vdb-entry