PT-2018-1850

Name of the Vulnerable Software and Affected Versions Cisco Meraki MR, MS, MX, Z1, and Z3 product lines affected versions not specified Description The issue is related to the local status page functionality, where an authenticated, remote attacker could modify device configuration files by...

PT-2014-8367

Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port. Recommendations For...

PT-2014-8366

Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to ...

PT-2014-8365

Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network. Recommendations Fo...

PT-2014-8371

Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network. Recommendations For...

CVE-2014-7993: Exposure of Sensitive Information to an Unauthorized Actor

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012...

CVE-2014-7999: Undefined Security Weakness

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565...

CVE-2014-7994: Improper Input Validation

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to an unspecified HTTP handler on the local network, aka Cisco-Meraki defect ID...

CVE-2014-7995: Undefined Security Weakness

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077...