CVE-2014-7999

Cisco Meraki MS/MR/MX devices running firmware older than 2014-09-24 are affected by CVE-2014-7999, enabling an authenticated remote user on an adjacent network to install arbitrary firmware via an insecure HTTP handler. The issue stems from access to a local management HTTP handler, as described...