CVE-2014-7995

High

Published: 24/12/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port.

Risk Assessment

Attackers can gain unauthorized access to the system, potentially leading to data compromise and control over the device.

Recommendation

It is recommended to update the device firmware to a version after 2014-09-24 and secure physical access to the devices.

Other vulnerabilities in Cisco-Meraki MS, MR, and MX devices

CVE-2014-7999High
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network.

Original NVD description (English source)

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077.