CVE-2020-1616CWE-307

JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service.

Medium · published April 8, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
72.8
In the wild
Unconfirmed
What it is

Due to insufficient server-side login attempt limit enforcement, a vulnerability in the SSH login service of Juniper Networks Juniper Advanced Threat Prevention (JATP) Series and Virtual JATP (vJATP) devices allows an unauthenticated, remote attacker to perform multiple login attempts in excess of the configured login attempt limit. Successful exploitation will allow the attacker to perform brute-force password attacks on the SSH service. This issue affects: Juniper Networks JATP and vJATP versions prior to 5.0.6.0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01428 · 72.8th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2020-04-08T19:25Z
EPSS history
Timeline
  • 08 APR 19:25Z
    JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service.
    cvelistv5