PT-2015-2867 · Juniper Networks · Screenos

Adam Caudill + 3 · Published 2015-12-18 · Updated 2025-11-02 · CVE-2015-7755

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 Juniper ScreenOS versions 6.3.0r12 before 6.3.0r12b Juniper ScreenOS versions 6.3.0r13 before 6.3.0r13b Juniper ScreenOS versions 6.3.0r14 before 6.3.0r14b Juniper ScreenOS versions 6.3.0r15 before 6.3.0r15b Juniper ScreenOS versions 6.3.0r16 before 6.3.0r16b Juniper ScreenOS versions 6.3.0r17 before 6.3.0r17b Juniper ScreenOS versions 6.3.0r18 before 6.3.0r18b Juniper ScreenOS versions 6.3.0r19 before 6.3.0r19b Juniper ScreenOS versions 6.3.0r20 before 6.3.0r21

Description The issue is related to weaknesses in the authentication procedure of the ScreenOS operating system. This allows a remote attacker to gain administrative access by entering a specially crafted password during an SSH or TELNET session.

Recommendations For Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18, update to a version outside of this range. For Juniper ScreenOS versions 6.3.0r12 before 6.3.0r12b, update to 6.3.0r12b or later. For Juniper ScreenOS versions 6.3.0r13 before 6.3.0r13b, update to 6.3.0r13b or later. For Juniper ScreenOS versions 6.3.0r14 before 6.3.0r14b, update to 6.3.0r14b or later. For Juniper ScreenOS versions 6.3.0r15 before 6.3.0r15b, update to 6.3.0r15b or later. For Juniper ScreenOS versions 6.3.0r16 before 6.3.0r16b, update to 6.3.0r16b or later. For Juniper ScreenOS versions 6.3.0r17 before 6.3.0r17b, update to 6.3.0r17b or later. For Juniper ScreenOS versions 6.3.0r18 before 6.3.0r18b, update to 6.3.0r18b or later. For Juniper ScreenOS versions 6.3.0r19 before 6.3.0r19b, update to 6.3.0r19b or later. For Juniper ScreenOS versions 6.3.0r20 before 6.3.0r21, update to 6.3.0r21 or later. As a temporary workaround, consider restricting access to SSH and TELNET sessions until a patch is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-310

CWE-287

CWE-259

Related Identifiers

BDU:2015-12233

BDU:2015-12234

BDU:2015-12265

CVE-2015-7755

JUNIPERBACKDOORCVE20157755CHECK

Affected Products

Screenos

References · 23

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/juniper_backdoor.rb · Exploit
• 🔥 https://github.com/hdm/juniper-cve-2015-7755 · Exploit
• 🔥 https://github.com/cinno/CVE-2015-7755-POC · Exploit
• 🔥 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713 · Exploit
• https://bdu.fstec.ru/vul/2015-12265 · Security Note
• https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554 · Vendor Advisory
• https://supportportal.juniper.net/s/article/2015-12-Out-of-Cycle-Security-Bulletin-ScreenOS-Multiple-Security-issues-with-ScreenOS-CVE-2015-7755-CVE-2015-7756 · Security Note
• https://bdu.fstec.ru/vul/2015-12233 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-7755 · Security Note
• https://bdu.fstec.ru/vul/2015-12234 · Security Note
• https://t.me/cveNotify/137278 · Telegram Post
• https://adamcaudill.com/2015/12/17/much-ado-about-juniper · Note
• http://securitytracker.com/id/1034489 · Note
• https://t.me/cveNotify/137070 · Telegram Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note