CVE-2014-7995
First published: Wed Dec 24 2014(Updated: )
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Meraki MX Firmware | <=2014-09-24 | |
| Cisco Meraki MX | ||
| Cisco Meraki Ms Firmware | <=2014-09-24 | |
| Cisco Meraki Ms | ||
| Cisco Meraki Mr Firmware | <=2014-09-24 | |
| Cisco Meraki MR |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-7995?
CVE-2014-7995 is classified as a high severity vulnerability that allows physical attackers to gain shell access.
How do I fix CVE-2014-7995?
To fix CVE-2014-7995, update your Cisco Meraki devices to firmware version 2014-09-24 or later.
What devices are affected by CVE-2014-7995?
CVE-2014-7995 affects Cisco Meraki MS, MR, and MX devices with firmware prior to 2014-09-24.
Can CVE-2014-7995 be exploited remotely?
No, CVE-2014-7995 requires physical access to the device to exploit the vulnerability.
What is the primary risk associated with CVE-2014-7995?
The primary risk associated with CVE-2014-7995 is unauthorized physical access to the system's shell which can lead to further attacks.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco meraki mx firmware
- version/cisco meraki mx firmware/2014-09-24
- canonical/cisco meraki mx
- canonical/cisco meraki ms firmware
- version/cisco meraki ms firmware/2014-09-24
- canonical/cisco meraki ms
- canonical/cisco meraki mr firmware
- version/cisco meraki mr firmware/2014-09-24
- canonical/cisco meraki mr