Lucene search

[email protected]CVE-2016-1273

HistoryApr 15, 2016 - 2:59 p.m.

CVE-2016-1273

2016-04-1514:59:08

CWE-310

[email protected]

web.nvd.nist.gov

juniper

junos os

cve-2016-1273

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors.

Affected configurations

NVD

Node

juniperjunosRange≤13.2x51d35

juniperjunosMatch14.1x53

juniperjunosMatch14.1x53d10

juniperjunosMatch14.1x53d15

juniperjunosMatch14.1x53d16

juniperjunosMatch14.1x53d25

juniperjunosMatch14.1x53d26

juniperjunosMatch15.1f2

juniperjunosMatch15.1f2-s1

juniperjunosMatch15.1r1

juniperjunosMatch15.1r2

juniperjunosMatch15.1x49d10

juniperjunosMatch15.1x49d20

juniperjunosMatch15.1x53d10

AND

juniperqfx10002Match-

juniperqfx5100Match-

CPENameOperatorVersion
juniper:junosjuniper junosle13.2x51
juniper:junosjuniper junoseq14.1x53
juniper:junosjuniper junoseq15.1
juniper:junosjuniper junoseq15.1x49
juniper:junosjuniper junoseq15.1x53

CPE	Name	Operator	Version
juniper:junos	juniper junos	le	13.2x51
juniper:junos	juniper junos	eq	14.1x53
juniper:junos	juniper junos	eq	15.1
juniper:junos	juniper junos	eq	15.1x49
juniper:junos	juniper junos	eq	15.1x53

References

kb.juniper.net/InfoCenter/index?page=content&id=JSA10746

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Related for CVE-2016-1273

cvelist1 openvas1 prion1 nvd1