Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-7756

The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 makes it easier for remote attackers to discover the plaintext content of VPN sessions by sniffing the network for ciphertext data and conducting an unspecified decryption attack.

Published

2015-12-19T14:59:02.767

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-310
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper screenos 6.2.0r15 Yes
Operating System juniper screenos 6.2.0r16 Yes
Operating System juniper screenos 6.2.0r17 Yes
Operating System juniper screenos 6.2.0r18 Yes
Operating System juniper screenos 6.3.0 Yes
Operating System juniper screenos 6.3.0 Yes
Operating System juniper screenos 6.3.0 Yes
Operating System juniper screenos 6.3.0 Yes
Operating System juniper screenos 6.3.0 Yes
Operating System juniper screenos 6.3.0 Yes
Operating System juniper screenos 6.3.0 Yes
Operating System juniper screenos 6.3.0 Yes
References