Search

Find a vulnerability

Search criteria

    3 vulnerabilities found for qfx5200 by juniper

    VAR-201705-3368

    Vulnerability from variot - Updated: 2025-04-20 23:20

    Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'. plural Juniper Networks Run on device Junos OS Contains an information disclosure vulnerability.Information may be obtained. Juniper Networks QFX3500 and other are Juniper Networks' switch products. Information obtained will aid in further attacks. Junos OS 14.1X53-D40, 15.1X53-D40, 15.1R2 and later fixes the issue. Attackers can exploit this vulnerability to obtain Etherleak memory

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-201705-3368",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "juniper",
            "version": "14.1x53"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "juniper",
            "version": "15.1x53"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "15.1"
          },
          {
            "model": "junos os",
            "scope": null,
            "trust": 0.8,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks qfx5200",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "networks qfx5100",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "networks qfx3600",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "networks qfx3500",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "networks junos 15.1x53-d35",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1x53-d30",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1x53-d20",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1r1",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f6",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f5-s2",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f5",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f4-s2",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f4",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f3",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f2-s5",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f2-s2",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f2",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1f1",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 15.1a2",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 14.1x53-d35",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 14.1x53-d30.3",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 14.1x53-d30",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 14.1x53-d28",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos 14.1x53-d26",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks ex4600",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "networks ex4300",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": "15.1r1"
          },
          {
            "model": "qfx5200",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "qfx5100",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "qfx3600",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "qfx3500",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "junos 15.1x53-d35",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1x53-d30",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1x53-d20",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1r1",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f6",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f5-s2",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f5",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f4-s2",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f4",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f3",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f2-s5",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f2-s2",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f2",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1f1",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1a2",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d35",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d30.3",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d30",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d28",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d26",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d25",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d20",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d18",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d16",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d12",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d10",
            "scope": null,
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "ex4600",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "ex4300",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "juniper",
            "version": "0"
          },
          {
            "model": "junos 15.1x53-d40",
            "scope": "ne",
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 15.1r2",
            "scope": "ne",
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos 14.1x53-d40",
            "scope": "ne",
            "trust": 0.3,
            "vendor": "juniper",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "db": "BID",
            "id": "95403"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          },
          {
            "db": "NVD",
            "id": "CVE-2017-2304"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:juniper:junos",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          }
        ]
      },
      "credits": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/credits#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Juniper Networks",
        "sources": [
          {
            "db": "BID",
            "id": "95403"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          }
        ],
        "trust": 0.9
      },
      "cve": "CVE-2017-2304",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 10.0,
                "id": "CVE-2017-2304",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 1.8,
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "NONE",
                "baseScore": 2.1,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 3.9,
                "id": "CNVD-2017-00554",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "LOW",
                "trust": 0.6,
                "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 10.0,
                "id": "VHN-110507",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.1,
                "vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "exploitabilityScore": 3.9,
                "id": "CVE-2017-2304",
                "impactScore": 3.6,
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.8,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2017-2304",
                "trust": 1.0,
                "value": "HIGH"
              },
              {
                "author": "NVD",
                "id": "CVE-2017-2304",
                "trust": 0.8,
                "value": "High"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2017-00554",
                "trust": 0.6,
                "value": "LOW"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-201701-317",
                "trust": 0.6,
                "value": "HIGH"
              },
              {
                "author": "VULHUB",
                "id": "VHN-110507",
                "trust": 0.1,
                "value": "MEDIUM"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "db": "VULHUB",
            "id": "VHN-110507"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          },
          {
            "db": "NVD",
            "id": "CVE-2017-2304"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as \u0027Etherleak\u0027. plural Juniper Networks Run on device Junos OS Contains an information disclosure vulnerability.Information may be obtained. Juniper Networks QFX3500 and other are Juniper Networks\u0027 switch products. Information obtained will aid in further attacks. \nJunos OS 14.1X53-D40, 15.1X53-D40, 15.1R2 and later fixes the issue. Attackers can exploit this vulnerability to obtain Etherleak memory",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2017-2304"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "db": "BID",
            "id": "95403"
          },
          {
            "db": "VULHUB",
            "id": "VHN-110507"
          }
        ],
        "trust": 2.52
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2017-2304",
            "trust": 3.4
          },
          {
            "db": "BID",
            "id": "95403",
            "trust": 2.6
          },
          {
            "db": "JUNIPER",
            "id": "JSA10773",
            "trust": 2.0
          },
          {
            "db": "SECTRACK",
            "id": "1037593",
            "trust": 1.7
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634",
            "trust": 0.8
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317",
            "trust": 0.7
          },
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554",
            "trust": 0.6
          },
          {
            "db": "VULHUB",
            "id": "VHN-110507",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "db": "VULHUB",
            "id": "VHN-110507"
          },
          {
            "db": "BID",
            "id": "95403"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          },
          {
            "db": "NVD",
            "id": "CVE-2017-2304"
          }
        ]
      },
      "id": "VAR-201705-3368",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "db": "VULHUB",
            "id": "VHN-110507"
          }
        ],
        "trust": 1.5842592583333333
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          }
        ]
      },
      "last_update_date": "2025-04-20T23:20:01.233000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "JSA10773",
            "trust": 0.8,
            "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10773\u0026actp=METADATA"
          },
          {
            "title": "Patches for multiple Juniper product information disclosure vulnerabilities",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/88107"
          },
          {
            "title": "Multiple Juniper Product information disclosure vulnerability repair measures",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=66979"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-200",
            "trust": 1.9
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-110507"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "db": "NVD",
            "id": "CVE-2017-2304"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.3,
            "url": "http://www.securityfocus.com/bid/95403"
          },
          {
            "trust": 1.7,
            "url": "https://kb.juniper.net/jsa10773"
          },
          {
            "trust": 1.7,
            "url": "http://www.securitytracker.com/id/1037593"
          },
          {
            "trust": 0.8,
            "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-2304"
          },
          {
            "trust": 0.8,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2017-2304"
          },
          {
            "trust": 0.3,
            "url": "http://www.juniper.net/"
          },
          {
            "trust": 0.3,
            "url": "https://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10773\u0026actp=rss"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "db": "VULHUB",
            "id": "VHN-110507"
          },
          {
            "db": "BID",
            "id": "95403"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          },
          {
            "db": "NVD",
            "id": "CVE-2017-2304"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "db": "VULHUB",
            "id": "VHN-110507"
          },
          {
            "db": "BID",
            "id": "95403"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          },
          {
            "db": "NVD",
            "id": "CVE-2017-2304"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-01-18T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "date": "2017-05-30T00:00:00",
            "db": "VULHUB",
            "id": "VHN-110507"
          },
          {
            "date": "2017-01-01T00:00:00",
            "db": "BID",
            "id": "95403"
          },
          {
            "date": "2017-07-03T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "date": "2017-01-13T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          },
          {
            "date": "2017-05-30T14:29:00.847000",
            "db": "NVD",
            "id": "CVE-2017-2304"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-01-18T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2017-00554"
          },
          {
            "date": "2019-05-10T00:00:00",
            "db": "VULHUB",
            "id": "VHN-110507"
          },
          {
            "date": "2017-01-23T02:05:00",
            "db": "BID",
            "id": "95403"
          },
          {
            "date": "2017-07-03T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          },
          {
            "date": "2019-05-14T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          },
          {
            "date": "2025-04-20T01:37:25.860000",
            "db": "NVD",
            "id": "CVE-2017-2304"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "remote",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "plural  Juniper Networks Run on device  Junos OS Vulnerable to information disclosure",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2017-004634"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "information disclosure",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201701-317"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-201604-0059

    Vulnerability from variot - Updated: 2025-04-12 23:24

    Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets. Supplementary information : CWE Vulnerability type by CWE-19: Data Handling ( Data processing ) Has been identified. JuniperNetworksQFXSeriesdevicesrunningJunosOS is a set of QFX series switches running network operating systems. Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause PFE panic, resulting in a a denial-of-service condition. Juniper Junos 14.1X53 prior to 14.1X53-D30 are vulnerable. The vulnerability is caused by the program not properly handling high frequency VXLAN packets

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-201604-0059",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "juniper",
            "version": "14.1x53"
          },
          {
            "model": "qfx10000",
            "scope": null,
            "trust": 0.8,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "14.1x53-d30"
          },
          {
            "model": "qfx5100",
            "scope": null,
            "trust": 0.8,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "qfx5200",
            "scope": null,
            "trust": 0.8,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "junos os",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "14.1x53"
          },
          {
            "model": "qfx3500",
            "scope": null,
            "trust": 0.8,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "qfx3600",
            "scope": null,
            "trust": 0.8,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "networks junos os 14.1x53\u003c14.1x53-d30",
            "scope": null,
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          },
          {
            "db": "NVD",
            "id": "CVE-2016-1274"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:juniper:junos",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/h:juniper:qfx10000",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/h:juniper:qfx3500",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/h:juniper:qfx3600",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/h:juniper:qfx5100",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/h:juniper:qfx5200",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          }
        ]
      },
      "credits": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/credits#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "The vendor reported this issue.",
        "sources": [
          {
            "db": "BID",
            "id": "86036"
          }
        ],
        "trust": 0.3
      },
      "cve": "CVE-2016-1274",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.8,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 10.0,
                "id": "CVE-2016-1274",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "HIGH",
                "trust": 1.8,
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 10.0,
                "id": "CNVD-2016-02316",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.6,
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.8,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 10.0,
                "id": "VHN-90093",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "HIGH",
                "trust": 0.1,
                "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "author": "nvd@nist.gov",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "CVE-2016-1274",
                "impactScore": 3.6,
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.8,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2016-1274",
                "trust": 1.0,
                "value": "HIGH"
              },
              {
                "author": "NVD",
                "id": "CVE-2016-1274",
                "trust": 0.8,
                "value": "High"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2016-02316",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-201604-294",
                "trust": 0.6,
                "value": "HIGH"
              },
              {
                "author": "VULHUB",
                "id": "VHN-90093",
                "trust": 0.1,
                "value": "HIGH"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "db": "VULHUB",
            "id": "VHN-90093"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          },
          {
            "db": "NVD",
            "id": "CVE-2016-1274"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets. Supplementary information : CWE Vulnerability type by CWE-19: Data Handling ( Data processing ) Has been identified. JuniperNetworksQFXSeriesdevicesrunningJunosOS is a set of QFX series switches running network operating systems. Juniper Junos is prone to a denial-of-service vulnerability. \nAn attacker may exploit this issue to cause PFE panic, resulting in a a denial-of-service condition. \nJuniper Junos 14.1X53 prior to 14.1X53-D30 are vulnerable. The vulnerability is caused by the program not properly handling high frequency VXLAN packets",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2016-1274"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "db": "BID",
            "id": "86036"
          },
          {
            "db": "VULHUB",
            "id": "VHN-90093"
          }
        ],
        "trust": 2.52
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2016-1274",
            "trust": 3.4
          },
          {
            "db": "JUNIPER",
            "id": "JSA10747",
            "trust": 2.6
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150",
            "trust": 0.8
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294",
            "trust": 0.7
          },
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316",
            "trust": 0.6
          },
          {
            "db": "BID",
            "id": "86036",
            "trust": 0.3
          },
          {
            "db": "VULHUB",
            "id": "VHN-90093",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "db": "VULHUB",
            "id": "VHN-90093"
          },
          {
            "db": "BID",
            "id": "86036"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          },
          {
            "db": "NVD",
            "id": "CVE-2016-1274"
          }
        ]
      },
      "id": "VAR-201604-0059",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "db": "VULHUB",
            "id": "VHN-90093"
          }
        ],
        "trust": 1.7
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          }
        ]
      },
      "last_update_date": "2025-04-12T23:24:31.217000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "JSA10747",
            "trust": 0.8,
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10747"
          },
          {
            "title": "JuniperNetworksQFXSeriesVXLAN Packet Denial of Service Vulnerability Patch",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/74315"
          },
          {
            "title": "Juniper Networks QFX Series Remediation measures for denial of service vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=60955"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-19",
            "trust": 1.1
          },
          {
            "problemtype": "CWE-Other",
            "trust": 0.8
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-90093"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "db": "NVD",
            "id": "CVE-2016-1274"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 1.6,
            "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10747"
          },
          {
            "trust": 0.8,
            "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-1274"
          },
          {
            "trust": 0.8,
            "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-1274"
          },
          {
            "trust": 0.6,
            "url": "https://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10747\u0026actp=search"
          },
          {
            "trust": 0.3,
            "url": "http://www.juniper.net/"
          },
          {
            "trust": 0.3,
            "url": "http://www.juniper.net/us/en/products-services/nos/junos/"
          },
          {
            "trust": 0.3,
            "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10747\u0026cat=sirt_1\u0026actp=list"
          },
          {
            "trust": 0.1,
            "url": "http://kb.juniper.net/infocenter/index?page=content\u0026amp;id=jsa10747"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "db": "VULHUB",
            "id": "VHN-90093"
          },
          {
            "db": "BID",
            "id": "86036"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          },
          {
            "db": "NVD",
            "id": "CVE-2016-1274"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "db": "VULHUB",
            "id": "VHN-90093"
          },
          {
            "db": "BID",
            "id": "86036"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          },
          {
            "db": "NVD",
            "id": "CVE-2016-1274"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2016-04-19T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "date": "2016-04-15T00:00:00",
            "db": "VULHUB",
            "id": "VHN-90093"
          },
          {
            "date": "2016-04-13T00:00:00",
            "db": "BID",
            "id": "86036"
          },
          {
            "date": "2016-04-22T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "date": "2016-04-14T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          },
          {
            "date": "2016-04-15T14:59:09.130000",
            "db": "NVD",
            "id": "CVE-2016-1274"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2016-04-19T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2016-02316"
          },
          {
            "date": "2016-04-20T00:00:00",
            "db": "VULHUB",
            "id": "VHN-90093"
          },
          {
            "date": "2016-07-06T14:26:00",
            "db": "BID",
            "id": "86036"
          },
          {
            "date": "2016-04-22T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          },
          {
            "date": "2016-04-18T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          },
          {
            "date": "2025-04-12T10:46:40.837000",
            "db": "NVD",
            "id": "CVE-2016-1274"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "remote",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Juniper QFX Runs on a series switch  Junos OS Service disruption in  (DoS) Vulnerabilities",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2016-002150"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "other",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201604-294"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-202001-0996

    Vulnerability from variot - Updated: 2024-11-23 22:05

    A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issue affects Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 14.1X53 versions prior to 14.1X53-D51; 15.1F6 versions prior to 15.1F6-S13; 15.1 versions prior to 15.1R7-S5; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238 on QFX5200/QFX5110 Series; 16.1 versions prior to 16.1R4-S13, 16.1R7-S5; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R1-S9, 17.2R3-S2; 17.3 versions prior to 17.3R2-S5, 17.3R3-S5; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S4, 19.1R2. Junos OS contains a directory traversal vulnerability (CWE-22). Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.Files on the server may be viewed or deleted by an authenticated J-web user. Juniper Networks Junos OS is a set of network operating system of Juniper Networks (Juniper Networks) dedicated to the company's hardware equipment. The operating system provides a secure programming interface and Junos SDK. The vulnerability stems from a network system or product that fails to properly filter resources or special elements in file paths. An attacker could exploit this vulnerability to access locations outside of restricted directories. The following products and versions are affected: Juniper Networks Junos OS Release 12.3, Release 12.3X48, Release 14.1X53, Release 15.1, Release 15.1F6, Release 15.1X49, Release 15.1X53, Release 16.1, Release 16.2, Release 17.1, Release 17.2, Release 17.3 Version, version 17.4, version 18.1, version 18.2, version 18.3, version 18.4, version 18.4, version 19.1

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-202001-0996",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "juniper",
            "version": "15.1x53"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "15.1x49"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "17.2"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "16.2"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "18.2"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "17.1"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "18.3"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "15.1"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "12.3"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "18.4"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "12.3x48"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "14.1x53"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "19.1"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "17.4"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "18.1"
          },
          {
            "model": "junos",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "juniper",
            "version": "16.1"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "12.3  prior to 12.3r12-s13"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "12.3x48  prior to 12.3x48-d85 on srx series"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "14.1x53  prior to 14.1x53-d51"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "15.1  prior to 15.1r7-s5"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "15.1f6  prior to 15.1f6-s13"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "15.1x49  prior to 15.1x49-d180 on srx series"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "15.1x53  prior to 15.1x53-d238 on qfx5200/qfx5110 series"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "16.1  prior to 16.1r4-s13, 16.1r7-s5"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "16.2  prior to 16.2r2-s10"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "17.1  prior to 17.1r3-s1"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "17.2  prior to 17.2r1-s9, 17.2r3-s2"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "17.3  prior to 17.3r2-s5, 17.3r3-s5"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "17.4  prior to 17.4r2-s9, 17.4r3"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "18.1  prior to 18.1r3-s8"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "18.2  prior to 18.2r3"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "18.3  prior to 18.3r2-s3, 18.3r3"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "18.4  prior to 18.4r2"
          },
          {
            "model": "junos os",
            "scope": "eq",
            "trust": 0.8,
            "vendor": "juniper",
            "version": "19.1  prior to 19.1r1-s4, 19.1r"
          },
          {
            "model": "qfx5200",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          },
          {
            "model": "qfx5110",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "juniper",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          },
          {
            "db": "NVD",
            "id": "CVE-2020-1606"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:juniper:junos",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          }
        ]
      },
      "cve": "CVE-2020-1606",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.5,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 8.0,
                "id": "CVE-2020-1606",
                "impactScore": 6.4,
                "integrityImpact": "PARTIAL",
                "severity": "MEDIUM",
                "trust": 1.0,
                "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              },
              {
                "acInsufInfo": null,
                "accessComplexity": "Low",
                "accessVector": "Network",
                "authentication": "Single",
                "author": "IPA",
                "availabilityImpact": "None",
                "baseScore": 5.5,
                "confidentialityImpact": "Partial",
                "exploitabilityScore": null,
                "id": "JVNDB-2020-000002",
                "impactScore": null,
                "integrityImpact": "Partial",
                "obtainAllPrivilege": null,
                "obtainOtherPrivilege": null,
                "obtainUserPrivilege": null,
                "severity": "Medium",
                "trust": 0.8,
                "userInteractionRequired": null,
                "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "author": "VULHUB",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.5,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 8.0,
                "id": "VHN-169100",
                "impactScore": 6.4,
                "integrityImpact": "PARTIAL",
                "severity": "MEDIUM",
                "trust": 0.1,
                "vectorString": "AV:N/AC:L/AU:S/C:P/I:P/A:P",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "exploitabilityScore": 2.8,
                "id": "CVE-2020-1606",
                "impactScore": 5.2,
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "trust": 1.0,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "author": "sirt@juniper.net",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "exploitabilityScore": 2.8,
                "id": "CVE-2020-1606",
                "impactScore": 2.5,
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "trust": 1.0,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.1"
              },
              {
                "attackComplexity": "Low",
                "attackVector": "Network",
                "author": "IPA",
                "availabilityImpact": "None",
                "baseScore": 5.4,
                "baseSeverity": "Medium",
                "confidentialityImpact": "Low",
                "exploitabilityScore": null,
                "id": "JVNDB-2020-000002",
                "impactScore": null,
                "integrityImpact": "Low",
                "privilegesRequired": "Low",
                "scope": "Unchanged",
                "trust": 0.8,
                "userInteraction": "None",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2020-1606",
                "trust": 1.0,
                "value": "HIGH"
              },
              {
                "author": "sirt@juniper.net",
                "id": "CVE-2020-1606",
                "trust": 1.0,
                "value": "MEDIUM"
              },
              {
                "author": "IPA",
                "id": "JVNDB-2020-000002",
                "trust": 0.8,
                "value": "Medium"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-202001-303",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "VULHUB",
                "id": "VHN-169100",
                "trust": 0.1,
                "value": "MEDIUM"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-169100"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          },
          {
            "db": "NVD",
            "id": "CVE-2020-1606"
          },
          {
            "db": "NVD",
            "id": "CVE-2020-1606"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with \u0027world\u0027 readable permission and delete files with \u0027world\u0027 writeable permission. This issue does not affect system files that can be accessed only by root user. This issue affects Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 14.1X53 versions prior to 14.1X53-D51; 15.1F6 versions prior to 15.1F6-S13; 15.1 versions prior to 15.1R7-S5; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238 on QFX5200/QFX5110 Series; 16.1 versions prior to 16.1R4-S13, 16.1R7-S5; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R1-S9, 17.2R3-S2; 17.3 versions prior to 17.3R2-S5, 17.3R3-S5; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S4, 19.1R2. Junos OS contains a directory traversal vulnerability (CWE-22). Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.Files on the server may be viewed or deleted by an authenticated J-web user. Juniper Networks Junos OS is a set of network operating system of Juniper Networks (Juniper Networks) dedicated to the company\u0027s hardware equipment. The operating system provides a secure programming interface and Junos SDK. The vulnerability stems from a network system or product that fails to properly filter resources or special elements in file paths. An attacker could exploit this vulnerability to access locations outside of restricted directories. The following products and versions are affected: Juniper Networks Junos OS Release 12.3, Release 12.3X48, Release 14.1X53, Release 15.1, Release 15.1F6, Release 15.1X49, Release 15.1X53, Release 16.1, Release 16.2, Release 17.1, Release 17.2, Release 17.3 Version, version 17.4, version 18.1, version 18.2, version 18.3, version 18.4, version 18.4, version 19.1",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2020-1606"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "db": "VULHUB",
            "id": "VHN-169100"
          }
        ],
        "trust": 1.71
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2020-1606",
            "trust": 2.5
          },
          {
            "db": "JUNIPER",
            "id": "JSA10985",
            "trust": 1.7
          },
          {
            "db": "JVN",
            "id": "JVN07375820",
            "trust": 1.4
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002",
            "trust": 1.4
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-303",
            "trust": 0.7
          },
          {
            "db": "AUSCERT",
            "id": "ESB-2020.0082",
            "trust": 0.6
          },
          {
            "db": "JUNIPER",
            "id": "JSA10979",
            "trust": 0.6
          },
          {
            "db": "JUNIPER",
            "id": "JSA10986",
            "trust": 0.6
          },
          {
            "db": "JUNIPER",
            "id": "JSA10980",
            "trust": 0.6
          },
          {
            "db": "JUNIPER",
            "id": "JSA10982",
            "trust": 0.6
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-03711",
            "trust": 0.1
          },
          {
            "db": "VULHUB",
            "id": "VHN-169100",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-169100"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          },
          {
            "db": "NVD",
            "id": "CVE-2020-1606"
          }
        ]
      },
      "id": "VAR-202001-0996",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-169100"
          }
        ],
        "trust": 0.01
      },
      "last_update_date": "2024-11-23T22:05:50.629000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "2020-01 Security Bulletin: Junos OS: Path traversal vulnerability in J-Web (CVE-2020-1606)",
            "trust": 0.8,
            "url": "https://kb.juniper.net/JSA10985"
          },
          {
            "title": "Juniper Networks Junos OS Repair measures for path traversal vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=108390"
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-22",
            "trust": 1.9
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-169100"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "db": "NVD",
            "id": "CVE-2020-1606"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 1.7,
            "url": "https://kb.juniper.net/jsa10985"
          },
          {
            "trust": 1.4,
            "url": "https://jvn.jp/en/jp/jvn07375820/index.html"
          },
          {
            "trust": 0.8,
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-1606"
          },
          {
            "trust": 0.6,
            "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10986"
          },
          {
            "trust": 0.6,
            "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10985"
          },
          {
            "trust": 0.6,
            "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10982"
          },
          {
            "trust": 0.6,
            "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10980"
          },
          {
            "trust": 0.6,
            "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10979"
          },
          {
            "trust": 0.6,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2020-1606"
          },
          {
            "trust": 0.6,
            "url": "https://www.auscert.org.au/bulletins/esb-2020.0082/"
          },
          {
            "trust": 0.6,
            "url": "https://vigilance.fr/vulnerability/junos-os-directory-traversal-via-j-web-31279"
          },
          {
            "trust": 0.6,
            "url": "https://jvndb.jvn.jp/en/contents/2020/jvndb-2020-000002.html"
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-169100"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          },
          {
            "db": "NVD",
            "id": "CVE-2020-1606"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "VULHUB",
            "id": "VHN-169100"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          },
          {
            "db": "NVD",
            "id": "CVE-2020-1606"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-01-15T00:00:00",
            "db": "VULHUB",
            "id": "VHN-169100"
          },
          {
            "date": "2020-01-10T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "date": "2020-01-09T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          },
          {
            "date": "2020-01-15T09:15:12.453000",
            "db": "NVD",
            "id": "CVE-2020-1606"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2021-02-05T00:00:00",
            "db": "VULHUB",
            "id": "VHN-169100"
          },
          {
            "date": "2020-01-10T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          },
          {
            "date": "2020-01-17T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          },
          {
            "date": "2024-11-21T05:10:57.077000",
            "db": "NVD",
            "id": "CVE-2020-1606"
          }
        ]
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Junos OS vulnerable to directory traversal",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2020-000002"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "path traversal",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-303"
          }
        ],
        "trust": 0.6
      }
    }