7.8

CVE-2016-1271

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via crafted combinations of CLI commands and arguments, a different vulnerability than CVE-2015-3003, CVE-2014-3816, and CVE-2014-0615.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Update d40 Version <= 12.1x46
Juniper ≫ Junos Version 12.1x47
Juniper ≫ Junos Version 12.1x47 Update d10
Juniper ≫ Junos Version 12.1x47 Update d15
Juniper ≫ Junos Version 12.1x47 Update d20
Juniper ≫ Junos Version 12.1x47 Update d25
Juniper ≫ Junos Version 12.3
Juniper ≫ Junos Version 12.3 Update r1
Juniper ≫ Junos Version 12.3 Update r10
Juniper ≫ Junos Version 12.3 Update r2
Juniper ≫ Junos Version 12.3 Update r3
Juniper ≫ Junos Version 12.3 Update r4
Juniper ≫ Junos Version 12.3 Update r5
Juniper ≫ Junos Version 12.3 Update r6
Juniper ≫ Junos Version 12.3 Update r7
Juniper ≫ Junos Version 12.3 Update r8
Juniper ≫ Junos Version 12.3 Update r9
Juniper ≫ Junos Version 12.3x48 Update d10
Juniper ≫ Junos Version 12.3x48 Update d15
Juniper ≫ Junos Version 12.3x48 Update d20
Juniper ≫ Junos Version 13.2
Juniper ≫ Junos Version 13.2 Update r1
Juniper ≫ Junos Version 13.2 Update r2
Juniper ≫ Junos Version 13.2 Update r3
Juniper ≫ Junos Version 13.2 Update r4
Juniper ≫ Junos Version 13.2 Update r5
Juniper ≫ Junos Version 13.2 Update r6
Juniper ≫ Junos Version 13.2 Update r7
Juniper ≫ Junos Version 13.3
Juniper ≫ Junos Version 13.3 Update r1
Juniper ≫ Junos Version 13.3 Update r2
Juniper ≫ Junos Version 13.3 Update r3
Juniper ≫ Junos Version 13.3 Update r4
Juniper ≫ Junos Version 13.3 Update r5
Juniper ≫ Junos Version 13.3 Update r6
Juniper ≫ Junos Version 14.1
Juniper ≫ Junos Version 14.1 Update r1
Juniper ≫ Junos Version 14.1 Update r2
Juniper ≫ Junos Version 14.1 Update r4
Juniper ≫ Junos Version 14.1 Update r5
Juniper ≫ Junos Version 14.2 Update r1
Juniper ≫ Junos Version 14.2 Update r2
Juniper ≫ Junos Version 14.2 Update r3
Juniper ≫ Junos Version 15.1
Juniper ≫ Junos Version 15.1x49 Update d10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.231
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739
Vendor Advisory
http://www.securitytracker.com/id/1035667