CVE-2014-7994: Input Validation
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to an unspecified HTTP handler on the local network, aka Cisco-Meraki defect ID 00301991.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7994?
CVE-2014-7994 is classified with a high severity due to the potential for remote command execution.
How do I fix CVE-2014-7994?
To fix CVE-2014-7994, update the firmware of affected Cisco Meraki devices to the version released after September 24, 2014.
What devices are affected by CVE-2014-7994?
CVE-2014-7994 affects Cisco Meraki MS, MR, and MX devices with firmware versions prior to 2014-09-24.
Can CVE-2014-7994 be exploited remotely?
Yes, CVE-2014-7994 can be exploited remotely if the attacker is on the local network.
What types of attacks are possible with CVE-2014-7994?
CVE-2014-7994 allows attackers to execute arbitrary commands on the vulnerable Cisco Meraki devices.