Design/Logic Flaw

2014-12-2400:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

JSON

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device’s case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077.

CPENameOperatorVersion
meraki_mr_firmwareeq<= 2014924
meraki_ms_firmwareeq<= 2014924
meraki_mx_firmwareeq<= 2014924

Name	Operator	Version
meraki_mr_firmware	eq	<= 2014924
meraki_ms_firmware	eq	<= 2014924
meraki_mx_firmware	eq	<= 2014924

References

tools.cisco.com/security/center/viewAlert.x?alertId=36799

dashboard.meraki.com/firmware_security