CVE-2017-10615

EPSS 1.72%
Published 13.10.2017 17:29:00
Last modified 20.04.2025 01:37:25
Source sirt@juniper.net
Teams watchlist Login
Open Login

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

Affected products Warnungen 0 Metrics 4 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Junos Version14.1

Juniper ≫ Junos Version14.1 Updater1

Juniper ≫ Junos Version14.1 Updater2

Juniper ≫ Junos Version14.1 Updater3

Juniper ≫ Junos Version14.1 Updater4

Juniper ≫ Junos Version14.1 Updater5

Juniper ≫ Junos Version14.1 Updater6

Juniper ≫ Junos Version14.1 Updater7

Juniper ≫ Junos Version14.1 Updater9

Juniper ≫ Junos Version14.1x53

   Juniper ≫ Ex3200 Version-
   Juniper ≫ Ex3300 Version-
   Juniper ≫ Ex3300-vc Version-
   Juniper ≫ Ex4200 Version-
   Juniper ≫ Ex4200-vc Version-
   Juniper ≫ Ex4300 Version-
   Juniper ≫ Ex4300-vc Version-
   Juniper ≫ Ex4500 Version-
   Juniper ≫ Ex4500-vc Version-
   Juniper ≫ Ex4550 Version-
   Juniper ≫ Ex4550-vc Version-
   Juniper ≫ Ex4600 Version-
   Juniper ≫ Ex4600-vc Version-
   Juniper ≫ Ex6200 Version-
   Juniper ≫ Ex8200 Version-
   Juniper ≫ Ex8200-vc Version-

Juniper ≫ Junos Version14.1x53 Updated10

Juniper ≫ Junos Version14.1x53 Updated15

Juniper ≫ Junos Version14.1x53 Updated16

Juniper ≫ Junos Version14.1x53 Updated25

Juniper ≫ Junos Version14.1x53 Updated26

Juniper ≫ Junos Version14.1x53 Updated27

Juniper ≫ Junos Version14.1x53 Updated30

Juniper ≫ Junos Version14.1x53 Updated35

Juniper ≫ Junos Version14.1x53 Updated40

Juniper ≫ Junos Version14.1x53 Updated45

Juniper ≫ Junos Version14.2

Juniper ≫ Junos Version14.2 Updater1

Juniper ≫ Junos Version14.2 Updater2

Juniper ≫ Junos Version14.2 Updater3

Juniper ≫ Junos Version14.2 Updater4

Juniper ≫ Junos Version14.2 Updater5

Juniper ≫ Junos Version14.2 Updater6

Juniper ≫ Junos Version14.2 Updater7

Juniper ≫ Junos Version14.2 Updater8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.72%	0.813

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
sirt@juniper.net	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id/1040039

https://kb.juniper.net/JSA10818

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-10615

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-10615

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-10615

EUVD