[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-7999Date: (C)2014-12-25   (M)2023-12-22


Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.7
Exploit Score: 5.1
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
http://tools.cisco.com/security/center/viewAlert.x?alertId=36800
https://dashboard.meraki.com/firmware_security

CPE    3
cpe:/h:cisco:meraki_ms:-
cpe:/h:cisco:meraki_mr:-
cpe:/h:cisco:meraki_mx:-
CWE    1
CWE-264

© SecPod Technologies