CVE-2014-6448
At a glance
- Source
- NVD
- EPSS
- EPSS 0.33 % · percentile 27 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- mitre
- NVD status
- Modified
Description
Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access.
Weaknesses (CWE)
- CWE-269 — Improper Privilege Management
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2014-6327
- GCVE · GCVE-0-2014-6448
CERT-FR advisories
- CERTFR-2015-AVI-431 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:juniper:junos:13.2:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.2x51:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.2x52:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.3:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |