CVE-2014-7995

High

Description

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077.

SeverityHigh
CVSS7.2
Exploit probability—
ProductCisco Meraki Mx Firmware
PublishedDec 24, 2014
First seenDec 24, 2014

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco meraki_mx_firmwarev ≤ 2014-09-24—
cisco meraki_mxNo range specified—
cisco meraki_ms_firmwarev ≤ 2014-09-24—
cisco meraki_msNo range specified—
cisco meraki_mr_firmwarev ≤ 2014-09-24—
cisco meraki_mrNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2014-7995 · Cisco Meraki Mx Firmware · Dark Radar