Lucene search
HistoryDec 24, 2014 - 12:59 a.m.
CVE-2014-7993
cisco-meraki
cve-2014-7993
ms
mr
mx
firmware
security
vulnerability
http handler
credential information
nvd
3.3 Low
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.4%
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012.
Affected configurations
Node
ciscomeraki_mx_firmwareRange≤2014-09-24
ciscomeraki_mx
Node
ciscomeraki_mr_firmwareRange≤2014-09-24
ciscomeraki_mr
Node
ciscomeraki_ms_firmwareRange≤2014-09-24
ciscomeraki_ms
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:meraki_mx_firmware | cisco meraki mx firmware | le | 2014-09-24 |
Related
prion
prion
Design/Logic Flaw
2014-12-24 00:59:00
cisco
cisco
Cisco Meraki HTTP Handler Local Information Disclosure Vulnerability
2014-12-23 16:00:59
cvelist
cvelist
CVE-2014-7993
2014-12-24 00:00:00
nvd
nvd
CVE-2014-7993
2014-12-24 00:59:00
3.3 Low
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.4%
Related for CVE-2014-7993