CVE-2014-7995

Cisco Meraki MS, MR, and MX Firmware < 2014-09-24 - Unauthenticated Shell Access via Physical Serial Port

Title source: llm
STIX 2.1

Description

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077.

References (2)

Core 2
Core References
Various Sources x_refsource_confirm
https://dashboard.meraki.com/firmware_security

Scores

EPSS 0.0034
EPSS Percentile 26.3%

Details

CWE
CWE-264
Status published
Products (6)
cisco/meraki_mr
cisco/meraki_mr_firmware < 2014-09-24
cisco/meraki_ms
cisco/meraki_ms_firmware < 2014-09-24
cisco/meraki_mx
cisco/meraki_mx_firmware < 2014-09-24
Published Dec 24, 2014
Tracked Since Feb 18, 2026