CVE-2014-7993

Published: Dec 24, 2014Modified: May 6, 2026

3.3

Vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 6.5 / Impact: 2.9

Source: NVD

Description

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012.

Affected (3)

Products: Cisco: Meraki Mx Firmware, Meraki Mr Firmware, Meraki Ms Firmware

3 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Meraki Mx Firmware	Up to 2014-09-24

Running on/with	Platform Versions
Cisco Meraki Mx	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Meraki Mr Firmware	Up to 2014-09-24

Running on/with	Platform Versions
Cisco Meraki Mr	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Meraki Ms Firmware	Up to 2014-09-24

Running on/with	Platform Versions
Cisco Meraki Ms	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=36797

Source: psirt@cisco.com

Vendor Advisory

https://dashboard.meraki.com/firmware_security

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=36797

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://dashboard.meraki.com/firmware_security

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.