CVE-2014-7999

High

Published: 24/12/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network.

Risk Assessment

This vulnerability may lead to unauthorized modification of device software, posing a risk to the integrity and security of the organization's network.

Recommendation

It is recommended to update the firmware of Cisco-Meraki devices to a version after 2014-09-24 to mitigate this vulnerability.

Other vulnerabilities in Cisco-Meraki MS, MR, and MX devices

CVE-2014-7995High
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port.

Original NVD description (English source)

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565.