CVE-2015-7754

High

Published: 08/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Juniper ScreenOS before version 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiation.

Risk Assessment

Attackers can remotely trigger a system crash or execute unauthorized code, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to update Juniper ScreenOS to version 6.3.0r21 or later to mitigate this vulnerability.

Other vulnerabilities in Juniper ScreenOS

CVE-2016-1268High
The administrative web services interface in Juniper ScreenOS before version 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a crafted SSL packet.

Original NVD description (English source)

Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiation.