CVE-2015-3007 — Improper Access Control in Juniper Junos

CWE-284 — Improper Access Control3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.0%
top 87.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Juniper JunosJuniper Junos OSJuniper SRX Series
Timeline
PublishedJul 14
Latest updateMay 17

Description

The Juniper SRX Series services gateways with Junos OS 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 do not properly implement the "set system ports console insecure" feature, which allows physically proximate attackers to gain administrative privileges by leveraging access to the console port.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages3 packages

▶NVDjuniper/junos12.1x46, 12.1x47, 12.3x48+2

🔴Vulnerability Details

1
GHSA
GHSA-xvjx-89jh-j37p: The Juniper SRX Series services gateways with Junos OS 12↗2022-05-17
▶

📋Vendor Advisories

1
Juniper
CVE-2015-3007: The Juniper SRX Series services gateways with Junos OS 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 do not p↗2015-07-14
▶