CVE-2017-10615

EPSS 2.46%
Veröffentlicht 13.10.2017 17:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

Junos: Potential remote code execution vulnerability in PAM

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 5

NVD 29 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 14.1

Juniper ≫ Junos Version 14.1 Update r1

Juniper ≫ Junos Version 14.1 Update r2

Juniper ≫ Junos Version 14.1 Update r3

Juniper ≫ Junos Version 14.1 Update r4

Juniper ≫ Junos Version 14.1 Update r5

Juniper ≫ Junos Version 14.1 Update r6

Juniper ≫ Junos Version 14.1 Update r7

Juniper ≫ Junos Version 14.1 Update r9

Juniper ≫ Junos Version 14.1x53

   Juniper ≫ Ex3200 Version -
   Juniper ≫ Ex3300 Version -
   Juniper ≫ Ex3300-vc Version -
   Juniper ≫ Ex4200 Version -
   Juniper ≫ Ex4200-vc Version -
   Juniper ≫ Ex4300 Version -
   Juniper ≫ Ex4300-vc Version -
   Juniper ≫ Ex4500 Version -
   Juniper ≫ Ex4500-vc Version -
   Juniper ≫ Ex4550 Version -
   Juniper ≫ Ex4550-vc Version -
   Juniper ≫ Ex4600 Version -
   Juniper ≫ Ex4600-vc Version -
   Juniper ≫ Ex6200 Version -
   Juniper ≫ Ex8200 Version -
   Juniper ≫ Ex8200-vc Version -

Juniper ≫ Junos Version 14.1x53 Update d10

Juniper ≫ Junos Version 14.1x53 Update d15

Juniper ≫ Junos Version 14.1x53 Update d16

Juniper ≫ Junos Version 14.1x53 Update d25

Juniper ≫ Junos Version 14.1x53 Update d26

Juniper ≫ Junos Version 14.1x53 Update d27

Juniper ≫ Junos Version 14.1x53 Update d30

Juniper ≫ Junos Version 14.1x53 Update d35

Juniper ≫ Junos Version 14.1x53 Update d40

Juniper ≫ Junos Version 14.1x53 Update d45

Juniper ≫ Junos Version 14.2

Juniper ≫ Junos Version 14.2 Update r1

Juniper ≫ Junos Version 14.2 Update r2

Juniper ≫ Junos Version 14.2 Update r3

Juniper ≫ Junos Version 14.2 Update r4

Juniper ≫ Junos Version 14.2 Update r5

Juniper ≫ Junos Version 14.2 Update r6

Juniper ≫ Junos Version 14.2 Update r7

Juniper ≫ Junos Version 14.2 Update r8

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.46%	0.823

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
Juniper	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id/1040039

https://kb.juniper.net/JSA10818

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-10615

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-10615

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-10615

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-10615