CVE-2014-7994: Input Validation
First published: Wed Dec 24 2014(Updated: )
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to an unspecified HTTP handler on the local network, aka Cisco-Meraki defect ID 00301991.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Meraki Mr Firmware | <=2014-09-24 | |
| Cisco Meraki MR | ||
| Cisco Meraki MX Firmware | <=2014-09-24 | |
| Cisco Meraki MX | ||
| Cisco Meraki Ms Firmware | <=2014-09-24 | |
| Cisco Meraki Ms |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-7994?
CVE-2014-7994 is classified with a high severity due to the potential for remote command execution.
How do I fix CVE-2014-7994?
To fix CVE-2014-7994, update the firmware of affected Cisco Meraki devices to the version released after September 24, 2014.
What devices are affected by CVE-2014-7994?
CVE-2014-7994 affects Cisco Meraki MS, MR, and MX devices with firmware versions prior to 2014-09-24.
Can CVE-2014-7994 be exploited remotely?
Yes, CVE-2014-7994 can be exploited remotely if the attacker is on the local network.
What types of attacks are possible with CVE-2014-7994?
CVE-2014-7994 allows attackers to execute arbitrary commands on the vulnerable Cisco Meraki devices.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco meraki mr firmware
- version/cisco meraki mr firmware/2014-09-24
- canonical/cisco meraki mr
- canonical/cisco meraki mx firmware
- version/cisco meraki mx firmware/2014-09-24
- canonical/cisco meraki mx
- canonical/cisco meraki ms firmware
- version/cisco meraki ms firmware/2014-09-24
- canonical/cisco meraki ms