The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations.
https://exchange.xforce.ibmcloud.com/vulnerabilities/30924
http://www.securityfocus.com/bid/21628
http://www.securityfocus.com/archive/1/454630/100/0/threaded