ACTIVELY EXPLOITED
CVE-2015-7755: Juniper ScreenOS Improper Authentication Vulnerability
| Vendor | Juniper |
|---|---|
| Product | ScreenOS |
| Actively exploited | Yes |
| Added to CISA KEV | 2 Oct 2025 |
| CISA federal deadline | 23 Oct 2025 |
| Weakness (CWE) | CWE-287 |
Required action (CISA's text)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description (NVD)
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.
SOURCES
Other Juniper flaws
- CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
- CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.