CVE-2014-0615
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks Juniper Junos是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件系统的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Junos中存在提权漏洞。当共同处理Junos OS CLI命令和参数时，本地攻击者可利用该漏洞获取root权限。以下版本受到影响：Juniper Junos 10.4R16之前的10.4版本，11.4R10之前的11.4版本，12.1R8-S2之前的12.1R版本，12.1X44-
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2014-0615
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows local users to gain privileges via vectors related to "certain combinations of Junos OS CLI commands and arguments."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Junos 提权漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Juniper Junos是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件系统的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Junos中存在提权漏洞。当共同处理Junos OS CLI命令和参数时，本地攻击者可利用该漏洞获取root权限。以下版本受到影响：Juniper Junos 10.4R16之前的10.4版本，11.4R10之前的11.4版本，12.1R8-S2之前的12.1R版本，12.1X44-
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2014-0615
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-0615
请登录查看更多情报信息。
Vendor Advisories for CVE-2014-0615 (4)
-
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10608 x_refsource_CONFIRM
-
-
-
Same Patch Batch · n/a · 2014-01-14 · 12 CVEs total
| CVE-2013-6398 | Apache CloudStack 权限许可和访问控制漏洞 | |
| CVE-2013-7106 | Icinga Web Interface 缓冲区溢出漏洞 | |
| CVE-2013-7107 | Icinga 跨站请求伪造漏洞 | |
| CVE-2013-7108 | Icinga/Icinga ‘process_cgivars’函数输入验证漏洞 | |
| CVE-2013-7205 | Nagios‘process_cgivars()’函数差一错误拒绝服务漏洞 | |
| CVE-2014-0031 | Apache CloudStack 权限许可和访问控制漏洞 | |
| CVE-2014-0613 | Juniper Junos XNM命令处理器拒绝服务漏洞 | |
| CVE-2014-0616 | Juniper Junos 竞争条件漏洞 | |
| CVE-2014-0617 | Juniper Junos 安全漏洞 | |
| CVE-2013-6123 | Android for MSM摄像头驱动数组索引错误漏洞 | |
| CVE-2014-0591 | ISC BIND ‘query_findclosestnsec3’函数缓冲区溢出漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2014-0615
No comments yet