PT-2016-1747 · Juniper Networks · Junos

Publicado 2016-04-15 · Atualizado 2016-12-03 · CVE-2016-1271

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Junos (affected versions not specified)

Description The issue is related to insufficient input validation in the Junos operating system. An attacker, acting locally, can exploit this to elevate their privileges by using specially crafted combinations of CLI commands and arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2016-01073

CVE-2016-1271

Produtos afetados

Junos

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-1271 · Nota de Segurança
• http://securitytracker.com/id/1035667 · Nota
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1271 · Aviso do Fabricante
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739 · Nota
• https://bdu.fstec.ru/vul/2016-01073 · Nota de Segurança