5 matches found
CVE-2018-0284: Undefined Security Weakness
A vulnerability in the local status page functionality of the Cisco Meraki MR, MS, MX, Z1, and Z3 product lines could allow an authenticated, remote attacker to modify device configuration files. The vulnerability occurs when handling requests to the local status page. An exploit could allow the...
PT-2018-1850
Name of the Vulnerable Software and Affected Versions Cisco Meraki MR, MS, MX, Z1, and Z3 product lines affected versions not specified Description The issue is related to the local status page functionality, where an authenticated, remote attacker could modify device configuration files by...
PT-2014-8367
Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port. Recommendations For...
PT-2014-8366
Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to ...
PT-2014-8371
Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network. Recommendations For...