35
CVE-2016-1278
—CVSS 3.0
7.8 high
EPSS
<1%p38
Published
()
Modified
Description
Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the "partition" option.
- Vendors
- juniper
- Products
- junos
- Weakness
- CWE-287
- Vector
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H