← Back to browse · API

CVE-2017-10615

Severity
CRITICAL
CVSS
9.8
EPSS
0.02455
Risk score
40.06
CISA KEV
No
PoC
No
Published
2017-10-13
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2017-2262, GHSA-G5M5-P4W3-7P3M
Products
Juniper Networks:Junos OS 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9, Juniper Networks:Junos OS 14.1X53 prior to 14.1X53-D50, Juniper Networks:Junos OS 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8
Sources
euvd EUVD-2017-2262

Description

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

References