NVD

Id
35253  
Name
CVE-2014-7999  
Description
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565.  
Reject
 
CVSS Version
2  
CVSS Score
7.7  
Severity
High  
CVSS Base Score
7.7  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
5.1  
CVSS Vector
(AV:A/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-12-23  
Modified Date
2014-12-24  
Seq
2014-7999  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180538 35253 CVE-2014-7999 http://tools.cisco.com/security/center/viewAlert.x?alertId=36800  View
180539 35253 CVE-2014-7999 https://dashboard.meraki.com/firmware_security  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18517 JVNDB-2014-007392 複数の Cisco-Meraki デバイスのファームウェアにおける任意のファームウェアをインストールされる脆弱性 Cisco-Meraki MS、MR、および MX デバイスのファームウェアには、任意のファームウェアをインストールされる脆弱性が存在します。 CVE-2014-7999 75292 CVE-2014-7999 35253 7.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007392.html 2014-12-23 2015-01-05 View