Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-10615

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

Published

2017-10-13T17:29:00.753

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Hardware juniper ex3200 - No
Hardware juniper ex3300 - No
Hardware juniper ex3300-vc - No
Hardware juniper ex4200 - No
Hardware juniper ex4200-vc - No
Hardware juniper ex4300 - No
Hardware juniper ex4300-vc - No
Hardware juniper ex4500 - No
Hardware juniper ex4500-vc - No
Hardware juniper ex4550 - No
Hardware juniper ex4550-vc - No
Hardware juniper ex4600 - No
Hardware juniper ex4600-vc - No
Hardware juniper ex6200 - No
Hardware juniper ex8200 - No
Hardware juniper ex8200-vc - No
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
References