{"id":"0e9cb4b5-1385-4ff8-9e29-18611bdf6d58","engagementId":"0cbfd297-0485-4bb1-84c7-22507e2dbe42","data":{"brief":{"id":"dd215b12-29c2-42c8-8879-9e4892499762","name":"Cisco Meraki Responsible Disclosure ","tagline":"Simplifying powerful technology to free passionate people to focus on their mission. ","description":"\u003ch1\u003eCisco Meraki Vulnerability Disclosure Program\u003c/h1\u003e\n\n\u003cp\u003eWelcome to the Cisco Meraki Vulnerability Disclosure Program (VDP) portal. At Cisco Meraki, we are committed to maintaining the highest standards of security for our products, firmware, software, cloud applications, and infrastructure. Your contributions play a crucial role in helping us achieve this goal.\u003c/p\u003e\n\n\u003ch2\u003eProgram Overview\u003c/h2\u003e\n\n\u003cp\u003eThis Vulnerability Disclosure Program is designed to provide a clear and straightforward process for customers, security researchers, and the general public to report potential security vulnerabilities in Cisco Meraki products. We value the efforts of the security community and appreciate your help in identifying and responsibly disclosing security issues.\u003c/p\u003e\n\n\u003ch3\u003eBug Bounty Program\u003c/h3\u003e\n\n\u003cp\u003eThis Vulnerability Disclosure Program is separate from our Bug Bounty Program. If you are interested in participating in our Bug Bounty Program, which offers monetary rewards for valid vulnerability reports, please visit \u003ca href=\"https://bugcrowd.com/ciscomeraki\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://bugcrowd.com/ciscomeraki\u003c/a\u003e.\u003c/p\u003e\n\n\u003ch3\u003eCisco (Non-Meraki) Reporting\u003c/h3\u003e\n\n\u003cp\u003ePlease note that this program does not cover vulnerabilities related to other parts of Cisco Systems. \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eTo report a vulnerability in Cisco Systems operational infrastructure, visit the \u003ca href=\"https://bugcrowd.com/ciscosecurity\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eCisco Responsible Disclosure page\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eTo report a vulnerability in a Cisco (non-Meraki) product, please contact \u003ca href=\"mailto:psirt@cisco.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003epsirt@cisco.com\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eIf you need to contact Cisco regarding a security incident, please contact \u003ca href=\"mailto:incidentresponse@cisco.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eincidentresponse@cisco.com\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eReporting a Vulnerability\u003c/h3\u003e\n\n\u003cp\u003eTo report a vulnerability, please provide a detailed description of the issue, including:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAffected product, firmware, software, or application\u003c/li\u003e\n\u003cli\u003eSteps to reproduce the vulnerability\u003c/li\u003e\n\u003cli\u003ePotential impact of the vulnerability\u003c/li\u003e\n\u003cli\u003eAny proof-of-concept code or screenshots that demonstrate the issue\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eOur Commitment\u003c/h3\u003e\n\n\u003cp\u003eUpon receiving your report, our security team will:\u003c/p\u003e\n\n\u003col\u003e\n\u003cli\u003eAcknowledge receipt of your report.\u003c/li\u003e\n\u003cli\u003eConduct a thorough investigation to verify the vulnerability.\u003c/li\u003e\n\u003cli\u003eDetermine the appropriate course of action, which may include remediation, risk acceptance, or other measures.\u003c/li\u003e\n\u003cli\u003eKeep you informed of the status of your report throughout the process.\u003c/li\u003e\n\u003c/ol\u003e\n\n\u003ch3\u003eResponsible Disclosure\u003c/h3\u003e\n\n\u003cp\u003eWe ask that you:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eGive us a reasonable amount of time to address the issue before making any information public.\u003c/li\u003e\n\u003cli\u003eAvoid exploiting the vulnerability for any reason.\u003c/li\u003e\n\u003cli\u003eRefrain from accessing, modifying, or deleting any data that does not belong to you.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eThank You\u003c/h3\u003e\n\n\u003cp\u003eWe appreciate your commitment to helping us improve the security of Cisco Meraki products. Your efforts make a significant difference in ensuring the safety and security of our users.\u003c/p\u003e\n\n\u003cp\u003eThank you for your collaboration and support.\u003c/p\u003e\n\n\u003cp\u003eSincerely,\u003cbr\u003e\nCisco Meraki Product Security Incident Response Team (PSIRT)\u003cbr\u003e\nhttps://meraki.cisco.com/trust/\u003c/p\u003e","industryTagId":"6825f068-7447-450e-9134-158ae26e18d4","targetsOverview":"\u003cp\u003eAll Cisco Meraki products, cloud services, and website are in scope for this program.\u003c/p\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"f1a52f9f-37d5-4be7-a435-d591b8e0c795","name":"In Scope Targets","targets":[{"id":"2fcb62f2-eb63-409b-af34-b0bc08505598","uri":"","name":"Meraki Owned Web Domains and Products","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7027df44-cbc9-421d-8709-4194097e5fd8","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"80448adf-6758-425a-a9b1-7c9ad0335f0e","uri":"","name":"Meraki Owned Cloud Services","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a57a4535-eaec-4c3b-be38-b99f25dfab2b","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eAll Cisco Meraki products, cloud services, and website are in scope for this program.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"0cbfd297-0485-4bb1-84c7-22507e2dbe42","code":"cisco-meraki-vdp-pro","state":"in_progress","endsAt":null,"bountyId":"00460be5-97f9-455b-bdff-d9bd6e1524a2","startsAt":"2024-10-09T12:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Computer Hardware","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/8801/181f/8b1ce9d3/50d524e7a3f762eb14d37c8c5c2d66ea_meraki-square-whiteongreen.png","logoBackgroundColor":"#5AA646","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2024-10-09T12:00:00.245Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/cisco-meraki-vdp-pro","changelogs":"/engagements/cisco-meraki-vdp-pro/changelog","submissions":null,"announcements":"/engagements/cisco-meraki-vdp-pro/announcements","hallOfFame":"/engagements/cisco-meraki-vdp-pro/hall_of_fames","crowdstream":"/engagements/cisco-meraki-vdp-pro/crowdstream"},"announcementsCount":0,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/cisco-meraki-vdp-pro/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=cisco-meraki-vdp-pro\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/cisco-meraki-vdp-pro/engagement_subscribers","engagementChangelogsUrl":"/engagements/cisco-meraki-vdp-pro/changelog","publishedAt":"2024-10-09T12:00:00.403Z","engagementChangelogUrl":"/engagements/cisco-meraki-vdp-pro/changelog/0e9cb4b5-1385-4ff8-9e29-18611bdf6d58","createUserFeedbacksUrl":"/engagements/cisco-meraki-vdp-pro/feedbacks","engagementCrowdstreamUrl":"/engagements/cisco-meraki-vdp-pro/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}