CVE-2014-7999 - Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565

Back Back to CVE browser

HIGH

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565

Published Dec 24, 2014

7.7

HIGH

CVSS 2.0

EPSS 0.73%

Description

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://tools.cisco.com/security/center/viewAlert.x?alertId=36800
x_refsource_CONFIRMVendor Advisory
https://dashboard.meraki.com/firmware_security
x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-7848
Advisory

Link	Providers	Tags
http://tools.cisco.com/security/center/viewAlert.x?alertId=36800		x_refsource_CONFIRMVendor Advisory
https://dashboard.meraki.com/firmware_security		x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-7848		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Dec 24, 2014

Updated Aug 6, 2024

Reserved Oct 8, 2014

Link CVE-2014-7999

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2014-7999

Red Hat

No data

ENISA EUVD

Assigner cisco

Published Dec 24, 2014

Updated Aug 6, 2024

Link EUVD-2014-7848

GitHub

No data