First published: Wed Dec 24 2014(Updated: )
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Meraki MX Firmware | <=2014-09-24 | |
Cisco Meraki MX | ||
Cisco Meraki Mr Firmware | <=2014-09-24 | |
Cisco Meraki MR | ||
Cisco Meraki Ms Firmware | <=2014-09-24 | |
Cisco Meraki Ms |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-7993 is considered a medium severity vulnerability due to its potential to expose sensitive credential information.
To fix CVE-2014-7993, upgrade your Cisco Meraki MS, MR, or MX devices to firmware version 2014-09-24 or later.
CVE-2014-7993 affects Cisco Meraki MS, MR, and MX devices running firmware versions prior to 2014-09-24.
Yes, CVE-2014-7993 can be exploited by remote attackers who have access to the local network.
CVE-2014-7993 can allow attackers to obtain sensitive credential information from the affected devices.