CVE-2015-3006
Vulnerability from cvelistv5
Published
2020-02-28 22:26
Modified
2024-09-16 18:19
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Summary
On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability.
References
cve@mitre.orghttps://kb.juniper.net/JSA10678Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://kb.juniper.net/JSA10678Vendor Advisory
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:32:21.553Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA10678"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-28T22:26:33",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA10678"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: Junos OS 12.2X50-D70 13.1X50-D30 13.2X51-D25 13.2X51-D30 13.2X52-D15 14.1X53-D10, and all subsequent releases. It is recommended to regenerate SSH keys or self signed certificates."
        }
      ],
      "source": {
        "advisory": "JSA10678",
        "defect": [
          "1000779"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Junos: QFX Series: Insufficient entropy on QFX3500 and QFX3600 platforms when the system boots up",
      "workarounds": [
        {
          "lang": "en",
          "value": "Avoid generating SSH keys or self-signed SSL certificates on the affected platforms until the system has been up and running for some time, allowing additional sources of randomness to generate sufficient entropy."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_PUBLIC": "2015-04-08T16:00:00.000Z",
          "ID": "CVE-2015-3006",
          "STATE": "PUBLIC",
          "TITLE": "Junos: QFX Series: Insufficient entropy on QFX3500 and QFX3600 platforms when the system boots up"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA10678",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA10678"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "The following software releases have been updated to resolve this specific issue: Junos OS 12.2X50-D70 13.1X50-D30 13.2X51-D25 13.2X51-D30 13.2X52-D15 14.1X53-D10, and all subsequent releases. It is recommended to regenerate SSH keys or self signed certificates."
          }
        ],
        "source": {
          "advisory": "JSA10678",
          "defect": [
            "1000779"
          ],
          "discovery": "INTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Avoid generating SSH keys or self-signed SSL certificates on the affected platforms until the system has been up and running for some time, allowing additional sources of randomness to generate sufficient entropy."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3006",
    "datePublished": "2020-02-28T22:26:33.894969Z",
    "dateReserved": "2015-04-07T00:00:00",
    "dateUpdated": "2024-09-16T18:19:24.874Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:12.2x50:d10:*:*:*:*:*:*\", \"matchCriteriaId\": \"497821DC-B070-4EE9-93DB-49352477423A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:12.2x50:d20:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C5F0149-58AC-4863-8FA5-3CB5B97BE4C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:12.2x50:d41.1:*:*:*:*:*:*\", \"matchCriteriaId\": \"3D56B992-5713-4656-94B7-943A3119B25D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:12.2x50:d42.1:*:*:*:*:*:*\", \"matchCriteriaId\": \"6436A50E-74AF-4886-8ECD-2AA37202A089\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:12.2x50:d56.1:*:*:*:*:*:*\", \"matchCriteriaId\": \"4F921F54-8B9D-481E-A3D8-DC485BFE2965\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:13.1x50:d10:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC28512D-DD4A-4BD3-B717-B7989A10F0F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:13.1x50:d25:*:*:*:*:*:*\", \"matchCriteriaId\": \"6863F885-C2A2-48AA-969E-CC4E6BFA2C2D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*\", \"matchCriteriaId\": \"3947A516-2054-48B3-ADFD-3CF88EC2288D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0951235-4A0A-4200-A7B1-9FF4540A3755\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:13.2x51:d20.2:*:*:*:*:*:*\", \"matchCriteriaId\": \"0CE9A629-DE43-4F7C-B93E-18BC6EC10FED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*\", \"matchCriteriaId\": \"9E3A9AB1-202A-4480-8FFD-872C79325854\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:13.2x52:d10:*:*:*:*:*:*\", \"matchCriteriaId\": \"1864A2D2-1FE6-4282-BB47-F5F18296D5B3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:13.2x52:d5:*:*:*:*:*:*\", \"matchCriteriaId\": \"8572251A-9A0B-4C59-8AE4-691D0E0EE53B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9A336BD3-4AB0-4E9E-8AD5-E6413A5A53FC\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F4D44B0-E6CE-4380-8712-AC832DBCB424\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability.\"}, {\"lang\": \"es\", \"value\": \"En las plataformas QFX3500 y QFX3600, el n\\u00famero de bytes recopilados desde la fuente de entrop\\u00eda de RANDOM_INTERRUPT cuando los arranques del dispositivo son insuficientes, conllevando posiblemente a claves SSH d\\u00e9biles o duplicadas o a certificados SSL/TLS auto-firmados. La entrop\\u00eda aumenta despu\\u00e9s que el sistema ha estado funcionando durante alg\\u00fan tiempo, pero inmediatamente despu\\u00e9s del arranque, la entrop\\u00eda es muy lenta. Este problema s\\u00f3lo afecta a los switches QFX3500 y QFX3600. Ning\\u00fan otro producto o plataforma de Juniper Networks est\\u00e1 afectada por esta vulnerabilidad de debilidad de la entrop\\u00eda.\"}]",
      "id": "CVE-2015-3006",
      "lastModified": "2024-11-21T02:28:29.740",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"cve@mitre.org\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:S/C:C/I:N/A:N\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.0, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2020-02-28T23:15:11.010",
      "references": "[{\"url\": \"https://kb.juniper.net/JSA10678\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://kb.juniper.net/JSA10678\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-331\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2015-3006\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-02-28T23:15:11.010\",\"lastModified\":\"2024-11-21T02:28:29.740\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability.\"},{\"lang\":\"es\",\"value\":\"En las plataformas QFX3500 y QFX3600, el n\u00famero de bytes recopilados desde la fuente de entrop\u00eda de RANDOM_INTERRUPT cuando los arranques del dispositivo son insuficientes, conllevando posiblemente a claves SSH d\u00e9biles o duplicadas o a certificados SSL/TLS auto-firmados. La entrop\u00eda aumenta despu\u00e9s que el sistema ha estado funcionando durante alg\u00fan tiempo, pero inmediatamente despu\u00e9s del arranque, la entrop\u00eda es muy lenta. Este problema s\u00f3lo afecta a los switches QFX3500 y QFX3600. Ning\u00fan otro producto o plataforma de Juniper Networks est\u00e1 afectada por esta vulnerabilidad de debilidad de la entrop\u00eda.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cve@mitre.org\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:C/I:N/A:N\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-331\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:12.2x50:d10:*:*:*:*:*:*\",\"matchCriteriaId\":\"497821DC-B070-4EE9-93DB-49352477423A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:12.2x50:d20:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C5F0149-58AC-4863-8FA5-3CB5B97BE4C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:12.2x50:d41.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D56B992-5713-4656-94B7-943A3119B25D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:12.2x50:d42.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6436A50E-74AF-4886-8ECD-2AA37202A089\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:12.2x50:d56.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F921F54-8B9D-481E-A3D8-DC485BFE2965\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:13.1x50:d10:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC28512D-DD4A-4BD3-B717-B7989A10F0F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:13.1x50:d25:*:*:*:*:*:*\",\"matchCriteriaId\":\"6863F885-C2A2-48AA-969E-CC4E6BFA2C2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*\",\"matchCriteriaId\":\"3947A516-2054-48B3-ADFD-3CF88EC2288D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0951235-4A0A-4200-A7B1-9FF4540A3755\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:13.2x51:d20.2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CE9A629-DE43-4F7C-B93E-18BC6EC10FED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E3A9AB1-202A-4480-8FFD-872C79325854\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:13.2x52:d10:*:*:*:*:*:*\",\"matchCriteriaId\":\"1864A2D2-1FE6-4282-BB47-F5F18296D5B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:13.2x52:d5:*:*:*:*:*:*\",\"matchCriteriaId\":\"8572251A-9A0B-4C59-8AE4-691D0E0EE53B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A336BD3-4AB0-4E9E-8AD5-E6413A5A53FC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F4D44B0-E6CE-4380-8712-AC832DBCB424\"}]}]}],\"references\":[{\"url\":\"https://kb.juniper.net/JSA10678\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://kb.juniper.net/JSA10678\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.