PT-2016-1747 · Juniper Networks · Junos

Published 2016-04-15 · Updated 2016-12-03 · CVE-2016-1271

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Junos (affected versions not specified)

Description The issue is related to insufficient input validation in the Junos operating system. An attacker, acting locally, can exploit this to elevate their privileges by using specially crafted combinations of CLI commands and arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2016-01073

CVE-2016-1271

Affected Products

Junos

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-1271 · Security Note
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1271 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01073 · Security Note
• http://securitytracker.com/id/1035667 · Note
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739 · Note