ACTIEF MISBRUIKT
CVE-2015-7755: Juniper ScreenOS Improper Authentication Vulnerability
| Leverancier | Juniper |
|---|---|
| Product | ScreenOS |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 2 okt 2025 |
| CISA-deadline (Amerikaanse overheid) | 23 okt 2025 |
| Zwakte (CWE) | CWE-287 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.
BRONNEN
Andere lekken bij Juniper
- CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
- CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.