CVE-2014-7993

2014-12-2400:59:00

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

57.3%

JSON

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012.

Affected configurations

Nvd

Node

ciscomeraki_mx_firmwareRange≤2014-09-24

AND

ciscomeraki_mx

Node

ciscomeraki_mr_firmwareRange≤2014-09-24

AND

ciscomeraki_mr

Node

ciscomeraki_ms_firmwareRange≤2014-09-24

AND

ciscomeraki_ms

VendorProductVersionCPE
ciscomeraki_mx_firmware*cpe:2.3:a:cisco:meraki_mx_firmware:*:*:*:*:*:*:*:*
ciscomeraki_mx*cpe:2.3:h:cisco:meraki_mx:*:*:*:*:*:*:*:*
ciscomeraki_mr_firmware*cpe:2.3:a:cisco:meraki_mr_firmware:*:*:*:*:*:*:*:*
ciscomeraki_mr*cpe:2.3:h:cisco:meraki_mr:*:*:*:*:*:*:*:*
ciscomeraki_ms_firmware*cpe:2.3:a:cisco:meraki_ms_firmware:*:*:*:*:*:*:*:*
ciscomeraki_ms*cpe:2.3:h:cisco:meraki_ms:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	meraki_mx_firmware	*	cpe:2.3:a:cisco:meraki_mx_firmware::::::::
cisco	meraki_mx	*	cpe:2.3:h:cisco:meraki_mx::::::::
cisco	meraki_mr_firmware	*	cpe:2.3:a:cisco:meraki_mr_firmware::::::::
cisco	meraki_mr	*	cpe:2.3:h:cisco:meraki_mr::::::::
cisco	meraki_ms_firmware	*	cpe:2.3:a:cisco:meraki_ms_firmware::::::::
cisco	meraki_ms	*	cpe:2.3:h:cisco:meraki_ms::::::::