Cisco Meraki local management interface firmware Installation Vulnerability (CVE-2014-7999)

Cisco Meraki local management interface firmware Installation Vulnerability (CVE-2014-7999)

Release date:
Updated on:

Affected Systems:
Cisco Meraki
Description:
CVE (CAN) ID: CVE-2014-7999

Cisco Meraki is a cloud management solution.

A security vulnerability exists in the local management interface of the Cisco Meraki device. authenticated remote attackers can exploit this vulnerability to access obsolete HTTP processing programs to install Malicious firmware and overwrite device configurations.

<* Source: Cisco
*>

Suggestion:
Vendor patch:

Cisco
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://dashboard.meraki.com/firmware_security
Http://tools.cisco.com/security/center/viewAlert.x? AlertId = 36800