CVE-2019-1815 Cisco Meraki MX67 and MX68 Sensitive Information Disclosure Vulnerability
Unauthenticated attackers can access sensitive logs on Cisco Meraki MX devices if the local status page is enabled, potentially leading to administrative access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-1815?
CVE-2019-1815 is a high-severity vulnerability in Cisco Meraki MX Firmware, published on 4 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security appliance models that may allow unauthenticated individuals to access and download logs containing sensitive, privileged device information. The vulnerability is due to improper access control to the files holding debugging and maintenance information, and is only exploitable when the local status page is enabled on the device. An attacker exploiting this vulnerability may obtain access to wireless pre-shared keys, Site-to-Site VPN key and other sensitive information. Under certain circumstances, this information may allow an attacker to obtain administrative-level access to the device.
Weakness: CWE-200
Which versions are affected by CVE-2019-1815?
How do I fix CVE-2019-1815?
No fix has been published for CVE-2019-1815 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-1815 being exploited?
There is no known exploitation of CVE-2019-1815 in the wild and no public exploit code.
Sources
Also known as GHSA-7vrc-3785-x4qx.