CoreCVE
Back

HIGH

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action

Published Nov 5, 2013

Description

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (8)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 5, 2013
Updated Aug 6, 2024
Reserved Nov 5, 2013
Link CVE-2013-6618
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2013-6618
Red Hat
Severity n/a
Public date n/a
Links CVE-2013-6618
ENISA EUVD
Assigner mitre
Published Nov 5, 2013
Updated Aug 6, 2024
Exploited since n/a
Link EUVD-2013-6420
EUVD-2013-6420