CVE-2016-1273 : Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switch

Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors.

Published 2016-04-15 14:59:08

Updated 2016-04-20 21:23:46

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2016-1273

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 51 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-1273

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

Products affected by CVE-2016-1273

Juniper » Junos » Update D35
Versions up to, including, (<=) 13.2x51
cpe:2.3:o:juniper:junos:*:d35:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53
cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1 Update R1
cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D10
cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D16
cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D10
cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D25
cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D26
cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D15
cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1 Update F2-s1
cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D20
cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1 Update R2
cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1 Update F2
cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D10
cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10002 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A

Vulnerability Details : CVE-2016-1273

Exploit prediction scoring system (EPSS) score for CVE-2016-1273

CVSS scores for CVE-2016-1273

CWE ids for CVE-2016-1273

References for CVE-2016-1273

Products affected by CVE-2016-1273