PT-2015-6046 · Juniper Networks · Junos

Publicado 2015-04-10 · Atualizado 2016-12-03 · CVE-2015-3002

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Juniper Junos versions prior to 12.1X44-D45 Juniper Junos versions prior to 12.1X46-D30 Juniper Junos versions prior to 12.1X47-D15 Juniper Junos versions prior to 12.3X48-D10

Description The issue is related to the log-out-on-disconnect feature when configured in the system port console stanza. This allows physically proximate attackers to reconnect to the console port and gain administrative access by leveraging access to the device.

Recommendations For versions prior to 12.1X44-D45, update to 12.1X44-D45 or later. For versions prior to 12.1X46-D30, update to 12.1X46-D30 or later. For versions prior to 12.1X47-D15, update to 12.1X47-D15 or later. For versions prior to 12.3X48-D10, update to 12.3X48-D10 or later.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

CVE-2015-3002

Produtos afetados

Junos

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-3002 · Nota de Segurança
• http://securitytracker.com/id/1032091 · Nota
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10672 · Aviso do Fabricante
• http://securityfocus.com/bid/74019 · Nota