CVE-2017-10615 - Junos: Potential remote code execution vulnerability in PAM

Back Back to CVE browser

CRITICAL

Junos: Potential remote code execution vulnerability in PAM

Published Oct 13, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 2.46%

Description

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

Affected products

Vendor Juniper Networks Product Junos OS Default
n/a
- Version
  14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9
  Status
  affected
  Constraints
  -
- Version
  14.1X53 prior to 14.1X53-D50
  Status
  affected
  Constraints
  -
- Version
  14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Junos OS

n/a

Version	Status	Constraints
14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9	affected	-
14.1X53 prior to 14.1X53-D50	affected	-
14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8	affected	-

Remediation

Vendor solution

There are no viable workarounds for this issue.

It is good security practice to limit the exploitable attack surface of critical infrastructure networking equipment. Use access lists or firewall filters to limit access to the router only from trusted, administrative networks or hosts.

The risk of malicious exploitation can be reduced by disabling services if they are not being used.

Weaknesses (1)

CWE-20

Improper Input Validation