cnvd - cnvd-2015-08307

cnvd-2015-08307

Vulnerability from cnvd

Title: Juniper Networks ScreenOS存在后门漏洞（CNVD-2015-08307）

Description:

ScreenOS是美国瞻博网络（Juniper Networks）公司开发的一款操作系统，主要运行在NetScreen系列的防火墙产品。

Juniper Networks ScreenOS存在未授权访问漏洞，攻击者利用漏洞可通过SSH或者telnet远程管理访问设备，并可以改变或删除日志条目。

Severity: 高

Patch Name: Juniper Networks ScreenOS存在后门漏洞（CNVD-2015-08307）的补丁

Patch Description:

ScreenOS是美国瞻博网络（Juniper Networks）公司开发的一款操作系统，主要运行在NetScreen系列的防火墙产品。

Juniper Networks ScreenOS存在后门，允许攻击者通过SSH或者telnet远程管理访问设备，并可以改变或删除日志条目。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了升级程序修复该漏洞，请及时更新下载： http://www.juniper.net/support/downloads/screenos.html

Reference: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713&actp=search https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7755

Impacted products

Name
['Juniper Networks ScreenOS 6.2.0r15-6.2.0r18', 'Juniper Networks ScreenOS 6.3.0r12-6.3.0r20']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-7755"
    }
  },
  "description": "ScreenOS\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u5f00\u53d1\u7684\u4e00\u6b3e\u64cd\u4f5c\u7cfb\u7edf\uff0c\u4e3b\u8981\u8fd0\u884c\u5728NetScreen\u7cfb\u5217\u7684\u9632\u706b\u5899\u4ea7\u54c1\u3002 \r\n\r\nJuniper Networks ScreenOS\u5b58\u5728\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u53ef\u901a\u8fc7SSH\u6216\u8005telnet\u8fdc\u7a0b\u7ba1\u7406\u8bbf\u95ee\u8bbe\u5907\uff0c\u5e76\u53ef\u4ee5\u6539\u53d8\u6216\u5220\u9664\u65e5\u5fd7\u6761\u76ee\u3002",
  "discovererName": "Juniper Networks",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u5347\u7ea7\u7a0b\u5e8f\u4fee\u590d\u8be5\u6f0f\u6d1e\uff0c\u8bf7\u53ca\u65f6\u66f4\u65b0\u4e0b\u8f7d\uff1a\r\nhttp://www.juniper.net/support/downloads/screenos.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-08307",
  "openTime": "2015-12-21",
  "patchDescription": "ScreenOS\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u5f00\u53d1\u7684\u4e00\u6b3e\u64cd\u4f5c\u7cfb\u7edf\uff0c\u4e3b\u8981\u8fd0\u884c\u5728NetScreen\u7cfb\u5217\u7684\u9632\u706b\u5899\u4ea7\u54c1\u3002 \r\n\r\nJuniper Networks ScreenOS\u5b58\u5728\u540e\u95e8\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u901a\u8fc7SSH\u6216\u8005telnet\u8fdc\u7a0b\u7ba1\u7406\u8bbf\u95ee\u8bbe\u5907\uff0c\u5e76\u53ef\u4ee5\u6539\u53d8\u6216\u5220\u9664\u65e5\u5fd7\u6761\u76ee\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Juniper Networks ScreenOS\u5b58\u5728\u540e\u95e8\u6f0f\u6d1e\uff08CNVD-2015-08307\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Juniper Networks ScreenOS 6.2.0r15-6.2.0r18",
      "Juniper Networks ScreenOS 6.3.0r12-6.3.0r20"
    ]
  },
  "referenceLink": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10713\u0026actp=search\r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7755",
  "serverity": "\u9ad8",
  "submitTime": "2015-12-21",
  "title": "Juniper Networks ScreenOS\u5b58\u5728\u540e\u95e8\u6f0f\u6d1e\uff08CNVD-2015-08307\uff09"
}

CVE-2015-7755 (GCVE-0-2015-7755)

Vulnerability from cvelistv5

Published

2015-12-19 11:00

Modified

2024-08-06 07:58

Severity ?

CWE

Summary

Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 allows remote attackers to obtain administrative access by entering an unspecified password during a (1) SSH or (2) TELNET session.

References

▼	URL	Tags
	http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/	x_refsource_MISC
	http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/	x_refsource_MISC
	http://www.securitytracker.com/id/1034489	vdb-entry, x_refsource_SECTRACK
	http://www.kb.cert.org/vuls/id/640184	third-party-advisory, x_refsource_CERT-VN
	https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554	x_refsource_CONFIRM
	https://github.com/hdm/juniper-cve-2015-7755	x_refsource_MISC
	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713	x_refsource_CONFIRM
	http://twitter.com/cryptoron/statuses/677900647560253442	x_refsource_MISC
	https://adamcaudill.com/2015/12/17/much-ado-about-juniper/	x_refsource_MISC
	http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/	x_refsource_MISC
	http://www.securityfocus.com/bid/79626	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:58:59.950Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/"
          },
          {
            "name": "1034489",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034489"
          },
          {
            "name": "VU#640184",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/640184"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/hdm/juniper-cve-2015-7755"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10713"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://twitter.com/cryptoron/statuses/677900647560253442"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://adamcaudill.com/2015/12/17/much-ado-about-juniper/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/"
          },
          {
            "name": "79626",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/79626"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-12-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 allows remote attackers to obtain administrative access by entering an unspecified password during a (1) SSH or (2) TELNET session."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/"
        },
        {
          "name": "1034489",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034489"
        },
        {
          "name": "VU#640184",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/640184"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/hdm/juniper-cve-2015-7755"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10713"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://twitter.com/cryptoron/statuses/677900647560253442"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://adamcaudill.com/2015/12/17/much-ado-about-juniper/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/"
        },
        {
          "name": "79626",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/79626"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7755",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 allows remote attackers to obtain administrative access by entering an unspecified password during a (1) SSH or (2) TELNET session."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/",
              "refsource": "MISC",
              "url": "http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/"
            },
            {
              "name": "http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/",
              "refsource": "MISC",
              "url": "http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/"
            },
            {
              "name": "1034489",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034489"
            },
            {
              "name": "VU#640184",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/640184"
            },
            {
              "name": "https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554",
              "refsource": "CONFIRM",
              "url": "https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554"
            },
            {
              "name": "https://github.com/hdm/juniper-cve-2015-7755",
              "refsource": "MISC",
              "url": "https://github.com/hdm/juniper-cve-2015-7755"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10713",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10713"
            },
            {
              "name": "http://twitter.com/cryptoron/statuses/677900647560253442",
              "refsource": "MISC",
              "url": "http://twitter.com/cryptoron/statuses/677900647560253442"
            },
            {
              "name": "https://adamcaudill.com/2015/12/17/much-ado-about-juniper/",
              "refsource": "MISC",
              "url": "https://adamcaudill.com/2015/12/17/much-ado-about-juniper/"
            },
            {
              "name": "http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/",
              "refsource": "MISC",
              "url": "http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/"
            },
            {
              "name": "79626",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/79626"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-7755",
    "datePublished": "2015-12-19T11:00:00",
    "dateReserved": "2015-10-08T00:00:00",
    "dateUpdated": "2024-08-06T07:58:59.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted