Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-1815 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security appliance models that may allow unauthenticated individuals to access and download logs containing sensitive, privileged device information. The vulnerability is due to improper access control to the files holding debugging and maintenance information, and is only exploitable when the local status page is enabled on the device. An attacker exploiting this vulnerability may obtain access to wireless pre-shared keys, Site-to-Site VPN key and other sensitive information. Under certain circumstances, this information may allow an attacker to obtain administrative-level access to the device.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:6.2 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CNA: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://documentation.meraki.com/General_Administration/Privacy_and_Security/Cisco_Meraki_MX67_and_MX68_Sensitive_Information_Disclosure_Vulnerability	[email protected]	AdvisoryRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	[email protected]

Affected Products

Product	Versions
Cisco Meraki MX67	All versions
CPE cpe:2.3:h:cisco:meraki_mx67:::::::: cpe:2.3:h:cisco:meraki_mx67c:::::::: cpe:2.3:h:cisco:meraki_mx67cw:::::::: cpe:2.3:h:cisco:meraki_mx67w:::::::: cpe:2.3:o:cisco:meraki_mx67c_firmware:::::::: cpe:2.3:o:cisco:meraki_mx67_firmware:::::::: cpe:2.3:o:cisco:meraki_mx67w_firmware:::::::: Remediation Upgrade: 14.39moderate effort Upgrade: 15.12moderate effort Workaround:low effort Disable the local status page on the device. This can be done via the Dashboard under Network Wide > General.
Cisco Meraki MX68	All versions
CPE cpe:2.3:h:cisco:meraki_mx68:::::::: cpe:2.3:h:cisco:meraki_mx68cw:::::::: cpe:2.3:h:cisco:meraki_mx68w:::::::: cpe:2.3:o:cisco:meraki_mx68cw_firmware:::::::: cpe:2.3:o:cisco:meraki_mx68_firmware:::::::: cpe:2.3:o:cisco:meraki_mx68w_firmware:::::::: Remediation Upgrade: 14.39moderate effort Upgrade: 15.12moderate effort Workaround:low effort Disable the local status page on the device. This can be done via the Dashboard under Network Wide > General.

Change History

3 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Mar 4, 2025	New CVE Received	[email protected]