Skip to content
CVE Tracker
Back

CVE-2019-1815

Cisco Meraki MX67 and MX68 Sensitive Information Disclosure Vulnerability

High7.5EPSS 0.36%
Published
Updated
Reserved
Assigned by
cisco

Description

A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security appliance models that may allow unauthenticated individuals to access and download logs containing sensitive, privileged device information. The vulnerability is due to improper access control to the files holding debugging and maintenance information, and is only exploitable when the local status page is enabled on the device. An attacker exploiting this vulnerability may obtain access to wireless pre-shared keys, Site-to-Site VPN key and other sensitive information. Under certain circumstances, this information may allow an attacker to obtain administrative-level access to the device.

Scores

CVSS scores of CVE-2019-1815, by who scored it
Scored byCVSSScoreVector
ciscoCNA (assigner)3.0High7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVDNVD · Deferred3.0Medium5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS (exploitation in 30 days)
0.36% · top 70% of all CVEs (3 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

What to do

Exploitation: As of this publication date, Cisco Meraki is NOT aware of any active exploitation of this vulnerability, nor the public availability of any tool to exploit this vulnerability, nor details on how to exploit this vulnerability.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2019-1815 badge
[![CVE-2019-1815](https://trackcve.app/badge/CVE-2019-1815.svg)](https://trackcve.app/cve/CVE-2019-1815)

Record last updated .