Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2015-7755
PUBLISHED
More InfoOfficial Page
Assigner-mitre
Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca
View Known Exploited Vulnerability (KEV) details
Published At-19 Dec, 2015 | 11:00
Updated At-21 Oct, 2025 | 23:55
Rejected At-
▼CVE Numbering Authority (CNA)

Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 allows remote attackers to obtain administrative access by entering an unspecified password during a (1) SSH or (2) TELNET session.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/
N/A
http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/
N/A
http://www.securitytracker.com/id/1034489
vdb-entry
http://www.kb.cert.org/vuls/id/640184
third-party-advisory
https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554
N/A
https://github.com/hdm/juniper-cve-2015-7755
N/A
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713
N/A
http://twitter.com/cryptoron/statuses/677900647560253442
N/A
https://adamcaudill.com/2015/12/17/much-ado-about-juniper/
N/A
http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/
N/A
http://www.securityfocus.com/bid/79626
vdb-entry
Hyperlink: http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/
Resource: N/A
Hyperlink: http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/
Resource: N/A
Hyperlink: http://www.securitytracker.com/id/1034489
Resource:
vdb-entry
Hyperlink: http://www.kb.cert.org/vuls/id/640184
Resource:
third-party-advisory
Hyperlink: https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554
Resource: N/A
Hyperlink: https://github.com/hdm/juniper-cve-2015-7755
Resource: N/A
Hyperlink: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713
Resource: N/A
Hyperlink: http://twitter.com/cryptoron/statuses/677900647560253442
Resource: N/A
Hyperlink: https://adamcaudill.com/2015/12/17/much-ado-about-juniper/
Resource: N/A
Hyperlink: http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/79626
Resource:
vdb-entry
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/
x_refsource_MISC
x_transferred
http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/
x_refsource_MISC
x_transferred
http://www.securitytracker.com/id/1034489
vdb-entry
x_refsource_SECTRACK
x_transferred
http://www.kb.cert.org/vuls/id/640184
third-party-advisory
x_refsource_CERT-VN
x_transferred
https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554
x_refsource_CONFIRM
x_transferred
https://github.com/hdm/juniper-cve-2015-7755
x_refsource_MISC
x_transferred
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713
x_refsource_CONFIRM
x_transferred
http://twitter.com/cryptoron/statuses/677900647560253442
x_refsource_MISC
x_transferred
https://adamcaudill.com/2015/12/17/much-ado-about-juniper/
x_refsource_MISC
x_transferred
http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/
x_refsource_MISC
x_transferred
http://www.securityfocus.com/bid/79626
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://arstechnica.com/security/2015/12/unauthorized-code-in-juniper-firewalls-decrypts-encrypted-vpn-traffic/
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://www.wired.com/2015/12/juniper-networks-hidden-backdoors-show-the-risk-of-government-backdoors/
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://www.securitytracker.com/id/1034489
Resource:
vdb-entry
x_refsource_SECTRACK
x_transferred
Hyperlink: http://www.kb.cert.org/vuls/id/640184
Resource:
third-party-advisory
x_refsource_CERT-VN
x_transferred
Hyperlink: https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://github.com/hdm/juniper-cve-2015-7755
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://twitter.com/cryptoron/statuses/677900647560253442
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://adamcaudill.com/2015/12/17/much-ado-about-juniper/
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://www.forbes.com/sites/thomasbrewster/2015/12/18/juniper-says-it-didnt-work-with-government-to-add-unauthorized-code-to-network-gear/
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://www.securityfocus.com/bid/79626
Resource:
vdb-entry
x_refsource_BID
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-287CWE-287 Improper Authentication
Type: CWE
CWE ID: CWE-287
Description: CWE-287 Improper Authentication
Metrics
VersionBase scoreBase severityVector
3.19.8CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
kev
dateAdded:
2025-10-02
reference:
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-7755
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
CVE-2015-7755 added to CISA KEV2025-10-02 00:00:00
Event: CVE-2015-7755 added to CISA KEV
Date: 2025-10-02 00:00:00
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-7755
government-resource
Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-7755
Resource:
government-resource
Details not found