CVE Catalog

CVE-2017-10615

Critical
Published: Translated: NVD NIST

Summary

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM.

Risk Assessment

An attacker could exploit this vulnerability to gain control over the system or disrupt its operation, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to upgrade to the latest version of Junos OS to mitigate this vulnerability and to monitor systems for unauthorized access attempts.

Original NVD description (English source)

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS