Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco meraki ms firmware vulnerabilities and exploits

(subscribe to this query)
7.7
CVSSv2
CVE-2014-7999
Cisco-Meraki MS, MR, and MX devices with firmware prior to 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565.
Cisco Meraki Mr FirmwareCisco Meraki Mr -Cisco Meraki Ms FirmwareCisco Meraki Ms -Cisco Meraki Mx FirmwareCisco Meraki Mx -
7.2
CVSSv2
CVE-2014-7995
Cisco-Meraki MS, MR, and MX devices with firmware prior to 2014-09-24 allow physically proximate malicious users to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077.
Cisco Meraki Mx FirmwareCisco Meraki Mx -Cisco Meraki Ms FirmwareCisco Meraki Ms -Cisco Meraki Mr FirmwareCisco Meraki Mr -
3.3
CVSSv2
CVE-2014-7993
Cisco-Meraki MS, MR, and MX devices with firmware prior to 2014-09-24 allow remote malicious users to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012.
Cisco Meraki Mx FirmwareCisco Meraki Mr FirmwareCisco Meraki Ms Firmware
5.4
CVSSv2
CVE-2014-7994
Cisco-Meraki MS, MR, and MX devices with firmware prior to 2014-09-24 allow remote malicious users to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to an unspecified HTTP handler on the local network, ak...
Cisco Meraki Mr FirmwareCisco Meraki Mr -Cisco Meraki Mx FirmwareCisco Meraki Mx -Cisco Meraki Ms FirmwareCisco Meraki Ms -
8.3
CVSSv2
CVE-2020-25681
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buff...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
8.3
CVSSv2
CVE-2020-25682
A flaw was found in dnsmasq prior to 2.83. A buffer overflow vulnerability exists in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
7.1
CVSSv2
CVE-2020-25683
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocat...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
4.3
CVSSv2
CVE-2020-25684
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2
CVE-2020-25685
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2
CVE-2020-25686
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32886insecure direct object referenceCVE-2024-34342file inclusionCVE-2024-34562CVE-2024-34347CVE-2024-26026CVE-2024-4647unprivileged
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook