CVE-2016-1278

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed…

published August 5, 2016

CVSS
—
EPSS
0%
Percentile
37.8
In the wild
Unconfirmed
What it is

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the "partition" option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00450 · 37.8th percentile
Published
2016-08-05T15:00Z
EPSS history
Timeline
  • 05 AUG 15:00Z
    Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed…
    cvelistv5