Sensitive Credential Exposure in Cisco-Meraki Devices

CVE-2014-7993

Summary

Cisco-Meraki MS, MR, and MX devices with firmware versions prior to September 24, 2014, are susceptible to a vulnerability that allows remote attackers to gain access to sensitive credential information. This issue arises from the exploitation of an unspecified HTTP handler, which can be leveraged by an attacker on the local network to compromise security and access confidential data.

References