Cisco IOS XE Software for Meraki Information Disclosure Vulnerability

A vulnerability exists in Cisco IOS XE Software for Cisco Meraki, allowing remote, unauthenticated attackers to access confidential device information. This issue arises because device configuration uploads are transmitted over an insecure tunnel. Exploitation can occur through an on-path attack between the affected device and the Cisco Meraki Dashboard, potentially exposing sensitive device configuration details.

Impact

Successful exploitation enables unauthorized access to sensitive device configuration information.

Remediation

Cisco has released software updates to address this vulnerability. For guidance on upgrading, consult the Cisco IOS and IOS XE Software Security Advisory Bundled Publication or use the Cisco Software Checker tool to identify the first fixed release.