CVE-2015-7755

Description

Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2015-7755
• https://supportportal.juniper.net/s/article/2015-12-Out-of-Cycle-Security-Bulletin-ScreenOS-Multiple-Security-issues-with-ScreenOS-CVE-2015-7755-CVE-2015-7756
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-7655
• http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/
• http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/
• http://www.securitytracker.com/id/1034489
• http://www.kb.cert.org/vuls/id/640184
• https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554
• https://github.com/hdm/juniper-cve-2015-7755
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713
• http://twitter.com/cryptoron/statuses/677900647560253442
• https://adamcaudill.com/2015/12/17/much-ado-about-juniper/
• http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/
• http://www.securityfocus.com/bid/79626