CVE-2016-1268

High

Published: 15/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The administrative web services interface in Juniper ScreenOS before version 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a crafted SSL packet.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operations, potentially leading to service outages for the organization.

Recommendation

It is recommended to update Juniper ScreenOS to version 6.3.0r21 or later to mitigate this vulnerability.

Other vulnerabilities in Juniper ScreenOS

CVE-2015-7754High
Juniper ScreenOS before version 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiation.

Original NVD description (English source)

The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a crafted SSL packet.