CVE-2014-7994

CVE-2014-7994 affects Cisco Meraki MS, MR, and MX devices with firmware prior to 2014-09-24. An attacker who knows a cross-device secret and a per-device secret can trigger arbitrary commands by sending a request to an unspecified HTTP handler on the local network. Root cause: flawed authenticati...

CVE-2014-7995

CVE-2014-7995 concerns Cisco Meraki MS, MR, and MX devices. The documented issue: firmware released before 2014-09-24 allows physically proximate attackers to obtain shell access by opening the device case and connecting a cable to a serial port (Cisco-Meraki defect ID 00302077). The effect is lo...

CVE-2014-7999

Cisco Meraki MS/MR/MX devices running firmware older than 2014-09-24 are affected by CVE-2014-7999, enabling an authenticated remote user on an adjacent network to install arbitrary firmware via an insecure HTTP handler. The issue stems from access to a local management HTTP handler, as described...