Description
A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information.
This vulnerability is due to a device configuration upload being performed over an insecure tunnel. An attacker could exploit this vulnerability by conducting an on-path attack between the affected device and the Cisco Meraki Dashboard. A successful exploit could allow the attacker to view sensitive device configuration information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco IOS XE Software | 17.14.1, 17.14.1a, 17.15.1, 17.15.1w, 17.15.1a, 17.15.2, 17.15.1b, 17.15.1x, 17.15.1z, 17.15.3, 17.15.2c, 17.15.2a, 17.15.1y, 17.15.2b, 17.15.3a, 17.15.4, 17.15.3b, 17.15.4d, 17.15.4e, 17.16.1, 17.16.1a, 17.17.1, 17.18.1, 17.18.1w, 17.18.1a | — |
Advisories 2
- NCSC-2026-0104 Kwetsbaarheden verholpen in Cisco IOS XE Software NCSC-NL (Netherlands) · Mar 26, 2026
- WID-SEC-2026-0874 Cisco IOS und IOS XE Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 25, 2026