CVE-2017-10615
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.
Affected (29)
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 14.1x53 |
| Running on/with | Platform Versions |
|---|---|
Juniper Ex3200 | All versions |
Juniper Ex3300 | All versions |
Juniper Ex3300 Vc | All versions |
Juniper Ex4200 | All versions |
Juniper Ex4200 Vc | All versions |
Juniper Ex4300 | All versions |
Juniper Ex4300 Vc | All versions |
Juniper Ex4500 | All versions |
Juniper Ex4500 Vc | All versions |
Juniper Ex4550 | All versions |
Juniper Ex4550 Vc | All versions |
Juniper Ex4600 | All versions |
Juniper Ex4600 Vc | All versions |
Juniper Ex6200 | All versions |
Juniper Ex8200 | All versions |
Juniper Ex8200 Vc | All versions |
References (4)
Source: sirt@juniper.net
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.