PT-2014-8367
CVE-2014-7995
·
Published
2014-12-24
·
Updated
2014-12-24
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24
Description
The issue allows physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port.
Recommendations
For Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24, update the firmware to a version released after 2014-09-24 to resolve the issue. As a temporary workaround, consider restricting physical access to the devices to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾