CVE-2015-3308

Risk Scores

Exploit Intelligence

• Discovers IoT devices in the network along with firmware security risk assessment The script uses IoTVAS APIs (iotvas-api.firmalyzer.com/v1/docs) to identify manufacturer, model, device CVEs and firmware security risks of IoT devices in the target IP range. It uses network service banners and optional MAC address of each host for device discovery. This script requires an IoTVAS API key that can be obtained from https://iotvas-api.firmalyzer.com/portal/signup (nmap-nse)
• Discovers IoT devices in the network along with firmware security risk assessment The script uses IoTVAS APIs (iotvas-api.firmalyzer.com/v1/docs) to identify manufacturer, model, device CVEs and firmware security risks of IoT devices in the target IP range. It uses network service banners and optional MAC address of each host for device discovery. This script requires an IoTVAS API key that can be obtained from https://iotvas-api.firmalyzer.com/portal/signup (nmap-nse)
• Discovers IoT devices in the network along with firmware security risk assessment The script uses IoTVAS APIs (iotvas-api.firmalyzer.com/v1/docs) to identify manufacturer, model, device CVEs and firmware security risks of IoT devices in the target IP range. It uses network service banners and optional MAC address of each host for device discovery. This script requires an IoTVAS API key that can be obtained from https://iotvas-api.firmalyzer.com/portal/signup (nmap-nse)
• Discovers IoT devices in the network along with firmware security risk assessment The script uses IoTVAS APIs (iotvas-api.firmalyzer.com/v1/docs) to identify manufacturer, model, device CVEs and firmware security risks of IoT devices in the target IP range. It uses network service banners and optional MAC address of each host for device discovery. This script requires an IoTVAS API key that can be obtained from https://iotvas-api.firmalyzer.com/portal/signup (nmap-nse)
• glcve_test.go (github-poc)
• glcve_test.go (github-poc)
• glcve_test.go (github-poc)
• glcve_test.go (github-poc)

Timeline

• Sep 2, 2015 CVE Published
• Jan 5, 2022 PoC Published
• Feb 4, 2022 EPSS Score
• Mar 29, 2022 EPSS Score
• May 20, 2022 EPSS Score
• Jul 12, 2022 EPSS Score
• Oct 26, 2022 EPSS Score
• Dec 18, 2022 EPSS Score
• Feb 8, 2023 EPSS Score
• Mar 7, 2023 EPSS Score
• Apr 2, 2023 EPSS Score
• May 25, 2023 EPSS Score

References

• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-Space-Security-Director-Policy-Enforcer-upgraded-to-CentOS-7-9 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release-CVE-2022-22218 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-RIB-and-PFEs-can-get-out-of-sync-due-to-a-memory-leak-caused-by-interface-flaps-or-route-churn-CVE-2022-22209 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-series-The-PFE-will-crash-when-specific-traffic-is-scanned-by-Enhanced-Web-Filtering-safe-search-CVE-2022-22206 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Denial-of-Service-DoS-vulnerability-in-RPD-upon-receipt-of-specific-BGP-update-CVE-2022-22213 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-EX4600-Series-and-QFX5000-Series-Receipt-of-specific-traffic-will-lead-to-an-fxpc-process-crash-followed-by-an-FPC-reboot-CVE-2022-22203 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-QFX5000-Series-and-MX-Series-An-l2alm-crash-leading-to-an-FPC-crash-can-be-observed-in-VxLAN-scenario-CVE-2022-22210 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-In-an-MPLS-scenario-upon-receipt-of-a-specific-IPv6-packet-an-FPC-will-crash-CVE-2022-22214 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Contrail-Networking-Multiple-vulnerabilities-resolved-in-Contrail-Networking-21-4 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-MX-Series-with-MPC11-In-a-GNF-node-slicing-scenario-gathering-AF-interface-statistics-can-lead-to-a-kernel-crash-CVE-2022-22207 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-OpenSSL-security-fixes advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-MX-Series-and-SRX-Series-When-receiving-a-specific-SIP-packets-stale-call-table-entries-are-created-which-eventually-leads-to-a-DoS-for-all-SIP-traffic-CVE-2022-22204 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-Evolved-A-high-rate-of-specific-hostbound-traffic-will-cause-unexpected-hostbound-traffic-delays-or-drops-CVE-2022-22212 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-var-run-pid-env-files-are-potentially-not-deleted-during-termination-of-a-gRPC-connection-causing-inode-exhaustion-CVE-2022-22215 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Northstar-Controller-nginx-component-allows-remote-attacker-to-cause-worker-process-crash-or-potentially-arbitrary-code-execution-CVE-2021-23017-2 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-QFX10k-Series-Denial-of-Service-DoS-upon-receipt-of-crafted-MLD-packets-on-multi-homing-ESI-in-VXLAN-CVE-2022-22217 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-PTX-Series-and-QFX10000-Series-Etherleak-memory-disclosure-in-Ethernet-padding-data-CVE-2022-22216 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-and-EX-Series-Local-privilege-escalation-flaw-in-download-functionality-CVE-2022-22221 advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-vulnerabilities-in-SQLite-resolved advisory
• https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-Series-An-FPC-memory-leak-can-occur-in-an-APBR-scenario-CVE-2022-22205 advisory

…and 1 more