Vulnerability Description
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Meraki Mr Firmware | <= 2014-09-24 |
| Cisco | Meraki Mr | - |
| Cisco | Meraki Ms Firmware | <= 2014-09-24 |
| Cisco | Meraki Ms | - |
| Cisco | Meraki Mx Firmware | <= 2014-09-24 |
| Cisco | Meraki Mx | - |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36800Vendor Advisory
- https://dashboard.meraki.com/firmware_security
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36800Vendor Advisory
- https://dashboard.meraki.com/firmware_security
FAQ
What is CVE-2014-7999?
CVE-2014-7999 is a vulnerability with a CVSS score of 7.7 (HIGH). Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, a...
How severe is CVE-2014-7999?
CVE-2014-7999 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-7999?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Meraki Mr Firmware, Cisco Meraki Mr, Cisco Meraki Ms Firmware, Cisco Meraki Ms, Cisco Meraki Mx Firmware.