CVE-2014-7999
Cisco Meraki MS, MR, MX Firmware < 2014-09-24 - Arbitrary Firmware Installation
Title source: llmDescription
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565.
References (2)
Core 2
Core References
Various Sources x_refsource_confirm
https://dashboard.meraki.com/firmware_security
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=36800
Scores
EPSS
0.0073
EPSS Percentile
50.5%
Details
CWE
CWE-264
Status
published
Products (6)
cisco/meraki_mr
cisco/meraki_mr_firmware
< 2014-09-24
cisco/meraki_ms
cisco/meraki_ms_firmware
< 2014-09-24
cisco/meraki_mx
cisco/meraki_mx_firmware
< 2014-09-24
Published
Dec 24, 2014
Tracked Since
Feb 18, 2026