CVE-2016-1265 PUBLISHED CVSS 9.800000190734863 CRITICAL

A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. All versions of Juniper Networks Junos Space prior to 15.1R3 are affected.

EPSS 1.00% · 76.8th percentile

Risk Scores

CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.00%
76.8th percentile

Affected Products

VendorProductVersions
Juniper NetworksJunos Space
Juniper NetworksJunos OSall versions prior to 15.1R2
juniperjunos_space0

Timeline

References

Open in Interactive Console →