When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect password can trigger a lockout of the root account. When an SRX Series device is in cluster mode, and a cluster sync or failover operation occurs, then there will be errors associated with synch or failover while the root account is locked out. Administrators can confirm if the root account is locked out via the following command root@device> show system login lockout user root User Lockout start Lockout end root 1995-01-01 01:00:01 PDT 1995-11-01 01:31:01 PDT Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D65 on SRX series; 12.3X48 prior to 12.3X48-D45 on SRX series; 15.1X49 prior to 15.1X49-D75 on SRX series.
This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 5.3, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts limited integrity, for affected systems. Impacting 2 products from juniper, from juniper organizations running these solutions should prioritize assessment and patching.
First disclosed in 2017, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.
2017-07-17T13:18:18.720
2025-04-20T01:37:25.860
Deferred
CVSSv3.0: 5.3 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Operating System | juniper | junos | 12.1x46 | Yes |
| Hardware | juniper | srx | - | No |
| Operating System | juniper | junos | 12.3x48 | Yes |
| Operating System | juniper | junos | 12.3x48 | Yes |
| Operating System | juniper | junos | 12.3x48 | Yes |
| Operating System | juniper | junos | 12.3x48 | Yes |
| Operating System | juniper | junos | 12.3x48 | Yes |
| Operating System | juniper | junos | 12.3x48 | Yes |
| Operating System | juniper | junos | 12.3x48 | Yes |
| Operating System | juniper | junos | 12.3x48 | Yes |
| Hardware | juniper | srx | - | No |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Operating System | juniper | junos | 15.1x49 | Yes |
| Hardware | juniper | srx | - | No |
SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For juniper's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.