CVE-2019-1815: Cisco Meraki MX67 and MX68 Sensitive Information Disclosure Vulnerability
First published: Tue Mar 04 2025(Updated: )
A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security appliance models that may allow unauthenticated individuals to access and download logs containing sensitive, privileged device information. The vulnerability is due to improper access control to the files holding debugging and maintenance information, and is only exploitable when the local status page is enabled on the device. An attacker exploiting this vulnerability may obtain access to wireless pre-shared keys, Site-to-Site VPN key and other sensitive information. Under certain circumstances, this information may allow an attacker to obtain administrative-level access to the device.
Credit: psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Meraki MX67 Firmware | ||
| Cisco Meraki MX68 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-1815?
CVE-2019-1815 is classified as a high severity vulnerability due to the potential exposure of sensitive device information.
How do I fix CVE-2019-1815?
To mitigate CVE-2019-1815, ensure that your Cisco Meraki MX67 or MX68 appliances are running the latest firmware updates provided by Cisco.
What are the affected products of CVE-2019-1815?
The affected products for CVE-2019-1815 are the Cisco Meraki MX67 and MX68 security appliance models.
Can CVE-2019-1815 be exploited remotely?
Yes, CVE-2019-1815 can be exploited by unauthenticated individuals, allowing remote access to sensitive logs.
What information is at risk due to CVE-2019-1815?
CVE-2019-1815 risks exposing privileged device information found in logs on the Cisco Meraki MX67 and MX68.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/last-modified-date
- agent/source
- agent/severity
- agent/tags
- agent/event
- vendor/cisco meraki
- canonical/cisco meraki mx67 firmware
- canonical/cisco meraki mx68 firmware