PT-2016-1750 · Juniper Networks · Screenos

Publicado 2016-04-15 · Atualizado 2016-12-03 · CVE-2016-1268

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper ScreenOS versions prior to 6.3.0r21

Description The issue is related to insufficient input validation in the administrative web services interface. It allows remote attackers to cause a denial of service, resulting in a reboot, by sending crafted SSL packets.

Recommendations For versions prior to 6.3.0r21, update to version 6.3.0r21 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2016-01076

CVE-2016-1268

Produtos afetados

Screenos

Referências · 6

• https://osv.dev/vulnerability/CVE-2016-1268 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1268 · Nota de Segurança
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10732 · Aviso do Fabricante
• http://securitytracker.com/id/1035666 · Nota
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10732 · Nota
• https://bdu.fstec.ru/vul/2016-01076 · Nota de Segurança