PT-2020-7727 · Juniper Networks · Junos

Published 2020-01-15 · Updated 2020-01-24 · CVE-2014-6448

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3

Description The issue allows local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access.

Recommendations For Juniper Junos OS versions 13.2 before 13.2R5, 13.2X51, 13.2X52, update to version 13.2R5 or later. For Juniper Junos OS versions 13.3 before 13.3R3, update to version 13.3R3 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2014-6448

Affected Products

Junos

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-6448 · Security Note
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10695 · Vendor Advisory