CVE-2015-7755

🗓️ 19 Dec 2015 11:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 90 Views🌐 WEB

Juniper ScreenOS vulnerability in multiple versions allowing remote attackers to obtain administrative access

Reporter	Title	Published	Views	Family All 32
GithubExploit	Exploit for Improper Authentication in Juniper Screenos	9 Jan 201622:49	–	githubexploit
ATTACKERKB	CVE-2015-7755	19 Dec 201500:00	–	attackerkb
BDU FSTEC	The vulnerability of the ScreenOS operating system, related to deficiencies in authentication procedures, allows a perpetrator to connect to the device with administrator privileges.	28 Dec 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ScreenOS operating system allows a hacker to decode messages.	28 Dec 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ScreenOS operating system allows a hacker to decode messages.	29 Dec 201500:00	–	bdu_fstec
Circl	CVE-2015-7755	21 Dec 201511:58	–	circl
CISA KEV Catalog	Juniper ScreenOS Improper Authentication Vulnerability	2 Oct 202500:00	–	cisa_kev
CISA	CISA Adds Five Known Exploited Vulnerabilities to Catalog	2 Oct 202512:00	–	cisa
CNVD	Backdoor Vulnerability in Juniper Networks ScreenOS (CNVD-2015-08307)	21 Dec 201500:00	–	cnvd
Check Point Advisories	Juniper Networks ScreenOS Authentication Bypass (CVE-2015-7755)	21 Dec 201500:00	–	checkpoint_advisories

NVD

Node

Source	Link
wired	www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/
securitytracker	www.securitytracker.com/id/1034489
kb	www.kb.cert.org/vuls/id/640184
forbes	www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/
github	www.github.com/hdm/juniper-cve-2015-7755
forums	www.forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554
twitter	www.twitter.com/cryptoron/statuses/677900647560253442
securityfocus	www.securityfocus.com/bid/79626
arstechnica	www.arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/
adamcaudill	www.adamcaudill.com/2015/12/17/much-ado-about-juniper/

Parameter	Position	Path	Description	CWE
cPoq2fi4cFk	path	command/prima-factory.cgi	HTTP CGI backdoor that enables Telnet by crafting requests to /command/prima-factory.cgi with HTTP Basic authentication.	CWE-287
zKw2hEr9	path	command/prima-factory.cgi	HTTP CGI backdoor that enables Telnet by crafting requests to /command/prima-factory.cgi with HTTP Basic authentication.	CWE-287

17 Jun 2026 00:33Current

7.9High risk

Vulners AI Score7.9

CVSS 3.19.8

CVSS 210

EPSS0.614

SSVC