CVE-2015-7755

🗓️ 19 Dec 2015 11:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 71 Views🌐 WEB

Juniper ScreenOS vulnerability in multiple versions allowing remote attackers to obtain administrative access

Reporter	Title	Published	Views	Family All 29
GithubExploit	Exploit for Improper Authentication in Juniper Screenos	9 Jan 201622:49	–	githubexploit
ATTACKERKB	CVE-2015-7755	19 Dec 201500:00	–	attackerkb
Circl	CVE-2015-7755	21 Dec 201511:58	–	circl
CISA KEV Catalog	Juniper ScreenOS Improper Authentication Vulnerability	2 Oct 202500:00	–	cisa_kev
CISA	CISA Adds Five Known Exploited Vulnerabilities to Catalog	2 Oct 202512:00	–	cisa
CNVD	Backdoor Vulnerability in Juniper Networks ScreenOS (CNVD-2015-08307)	21 Dec 201500:00	–	cnvd
Check Point Advisories	Juniper Networks ScreenOS Authentication Bypass (CVE-2015-7755)	21 Dec 201500:00	–	checkpoint_advisories
Cvelist	CVE-2015-7755	19 Dec 201511:00	–	cvelist
EUVD	EUVD-2015-7656	7 Oct 202500:30	–	euvd
Ivanti	SA40107 - Response to Juniper ScreenOS security advisory JSA10713 (CVE-2015-7755 and CVE-2015-7756)	14 Feb 202307:22	–	ivanti

NVD

Node

Source	Link
wired	www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/
securitytracker	www.securitytracker.com/id/1034489
kb	www.kb.cert.org/vuls/id/640184
forbes	www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/
github	www.github.com/hdm/juniper-cve-2015-7755
forums	www.forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554
twitter	www.twitter.com/cryptoron/statuses/677900647560253442
securityfocus	www.securityfocus.com/bid/79626
arstechnica	www.arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/
adamcaudill	www.adamcaudill.com/2015/12/17/much-ado-about-juniper/

Parameter	Position	Path	Description	CWE
cPoq2fi4cFk	request body	command/prima-factory.cgi	Web CGI backdoor that enables Telnet by authenticating to /command/prima-factory.cgi, allowing remote code/service activation.	CWE-287
zKw2hEr9	request body	command/prima-factory.cgi	Web CGI backdoor that enables Telnet by authenticating to /command/prima-factory.cgi, allowing remote code/service activation.	CWE-287

21 Apr 2026 16:27Current

7.9High risk

Vulners AI Score7.9

CVSS 3.19.8

CVSS 210

EPSS0.85797

SSVC