CVE-2014-7995: High severity cisco meraki mx firmware vulnerability

Published Dec 24, 2014
·
Updated

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077.

Affected Software

6 affected components
Cisco Meraki MX Firmware<=2014-09-24
Cisco Meraki MX
Cisco Meraki Ms Firmware<=2014-09-24
Cisco Meraki MS
Cisco Meraki Mr Firmware<=2014-09-24
Cisco Meraki MR

Event History

Dec 24, 2014
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2014-7995?

CVE-2014-7995 is classified as a high severity vulnerability that allows physical attackers to gain shell access.

2

How do I fix CVE-2014-7995?

To fix CVE-2014-7995, update your Cisco Meraki devices to firmware version 2014-09-24 or later.

3

What devices are affected by CVE-2014-7995?

CVE-2014-7995 affects Cisco Meraki MS, MR, and MX devices with firmware prior to 2014-09-24.

4

Can CVE-2014-7995 be exploited remotely?

No, CVE-2014-7995 requires physical access to the device to exploit the vulnerability.

5

What is the primary risk associated with CVE-2014-7995?

The primary risk associated with CVE-2014-7995 is unauthorized physical access to the system's shell which can lead to further attacks.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203