CVE-2016-1258

Published: Jan 15, 2016Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Embedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R8, 14.1 before 14.1R6, and 14.2 before 14.2R5, allows remote attackers to cause a denial of service (J-Web crash) via unspecified vectors.

Affected (64)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

64 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x44 d10
Juniper Junos	Version 12.1x44 d15
Juniper Junos	Version 12.1x44 d20
Juniper Junos	Version 12.1x44 d25
Juniper Junos	Version 12.1x44 d30
Juniper Junos	Version 12.1x44 d35
Juniper Junos	Version 12.1x44 d40
Juniper Junos	Version 12.1x44 d45
Juniper Junos	Version 12.1x44 d50
Juniper Junos	Version 12.1x44 d55
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x46 d10
Juniper Junos	Version 12.1x46 d15
Juniper Junos	Version 12.1x46 d20
Juniper Junos	Version 12.1x46 d25
Juniper Junos	Version 12.1x46 d30
Juniper Junos	Version 12.1x46 d35
Juniper Junos	Version 12.1x46 d40
Juniper Junos	Version 12.1x47
Juniper Junos	Version 12.1x47 d10
Juniper Junos	Version 12.1x47 d15
Juniper Junos	Version 12.1x47 d20
Juniper Junos	Version 12.1x47 d25
Juniper Junos	Version 12.3
Juniper Junos	Version 12.3 r1
Juniper Junos	Version 12.3 r2
Juniper Junos	Version 12.3 r3
Juniper Junos	Version 12.3 r4
Juniper Junos	Version 12.3 r5
Juniper Junos	Version 12.3 r6
Juniper Junos	Version 12.3 r7
Juniper Junos	Version 12.3 r8
Juniper Junos	Version 12.3 r9
Juniper Junos	Version 12.3x48
Juniper Junos	Version 12.3x48 d10
Juniper Junos	Version 12.3x48 d15
Juniper Junos	Version 13.2x51
Juniper Junos	Version 13.2x51 d15
Juniper Junos	Version 13.2x51 d20
Juniper Junos	Version 13.2x51 d21
Juniper Junos	Version 13.2x51 d25
Juniper Junos	Version 13.2x51 d26
Juniper Junos	Version 13.2x51 d30
Juniper Junos	Version 13.2x51 d35
Juniper Junos	Version 13.3
Juniper Junos	Version 13.3 r1
Juniper Junos	Version 13.3 r2
Juniper Junos	Version 13.3 r3
Juniper Junos	Version 13.3 r4
Juniper Junos	Version 13.3 r5
Juniper Junos	Version 13.3 r6
Juniper Junos	Version 13.3 r7
Juniper Junos	Version 14.1
Juniper Junos	Version 14.1 r1
Juniper Junos	Version 14.1 r2
Juniper Junos	Version 14.1 r3
Juniper Junos	Version 14.1 r4
Juniper Junos	Version 14.1 r5
Juniper Junos	Version 14.2
Juniper Junos	Version 14.2 r1
Juniper Junos	Version 14.2 r2
Juniper Junos	Version 14.2 r3
Juniper Junos	Version 14.2 r4

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10720

Source: cve@mitre.org

Vendor Advisory

http://www.securitytracker.com/id/1035116

Source: cve@mitre.org

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10720

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1035116

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.