Lucene search

[email protected]CVE-2016-1271

HistoryApr 15, 2016 - 2:59 p.m.

CVE-2016-1271

2016-04-1514:59:07

CWE-20

[email protected]

web.nvd.nist.gov

cve-2016-1271

vulnerability

juniper

junos os

privilege escalation

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

JSON

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via crafted combinations of CLI commands and arguments, a different vulnerability than CVE-2015-3003, CVE-2014-3816, and CVE-2014-0615.

Affected configurations

NVD

Node

juniperjunosRange≤12.1x46d40

juniperjunosMatch12.1x47

juniperjunosMatch12.1x47d10

juniperjunosMatch12.1x47d15

juniperjunosMatch12.1x47d20

juniperjunosMatch12.1x47d25

juniperjunosMatch12.3

juniperjunosMatch12.3r1

juniperjunosMatch12.3r10

juniperjunosMatch12.3r2

juniperjunosMatch12.3r3

juniperjunosMatch12.3r4

juniperjunosMatch12.3r5

juniperjunosMatch12.3r6

juniperjunosMatch12.3r7

juniperjunosMatch12.3r8

juniperjunosMatch12.3r9

juniperjunosMatch12.3x48d10

juniperjunosMatch12.3x48d15

juniperjunosMatch12.3x48d20

juniperjunosMatch13.2

juniperjunosMatch13.2r1

juniperjunosMatch13.2r2

juniperjunosMatch13.2r3

juniperjunosMatch13.2r4

juniperjunosMatch13.2r5

juniperjunosMatch13.2r6

juniperjunosMatch13.2r7

juniperjunosMatch13.3

juniperjunosMatch13.3r1

juniperjunosMatch13.3r2

juniperjunosMatch13.3r3

juniperjunosMatch13.3r4

juniperjunosMatch13.3r5

juniperjunosMatch13.3r6

juniperjunosMatch14.1

juniperjunosMatch14.1r1

juniperjunosMatch14.1r2

juniperjunosMatch14.1r4

juniperjunosMatch14.1r5

juniperjunosMatch14.2r1

juniperjunosMatch14.2r2

juniperjunosMatch14.2r3

juniperjunosMatch15.1

juniperjunosMatch15.1x49d10

CPENameOperatorVersion
juniper:junosjuniper junosle12.1x46
juniper:junosjuniper junoseq12.1x47
juniper:junosjuniper junoseq12.3
juniper:junosjuniper junoseq12.3x48
juniper:junosjuniper junoseq13.2
juniper:junosjuniper junoseq13.3
juniper:junosjuniper junoseq14.1
juniper:junosjuniper junoseq14.2
juniper:junosjuniper junoseq15.1
juniper:junosjuniper junoseq15.1x49

CPE	Name	Operator	Version
juniper:junos	juniper junos	le	12.1x46
juniper:junos	juniper junos	eq	12.1x47
juniper:junos	juniper junos	eq	12.3
juniper:junos	juniper junos	eq	12.3x48
juniper:junos	juniper junos	eq	13.2
juniper:junos	juniper junos	eq	13.3
juniper:junos	juniper junos	eq	14.1
juniper:junos	juniper junos	eq	14.2
juniper:junos	juniper junos	eq	15.1
juniper:junos	juniper junos	eq	15.1x49

References

kb.juniper.net/InfoCenter/index?page=content&id=JSA10739

www.securitytracker.com/id/1035667

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

JSON

Related for CVE-2016-1271

prion4 nvd4 cvelist4 openvas4 cve3 nessus3 kaspersky1