CVE-2015-3003
Last modified
CVE-2015-3003 is a vulnerability of currently unknown severity. Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 allows local users to gain privileges via crafted combinations of CLI commands and arguments.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 allows local users to gain privileges via crafted combinations of CLI commands and arguments.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Junos | 12.1x44 | — |
| Juniper | Junos | 12.1x45 | — |
| Juniper | Junos | 12.1x46 | — |
| Juniper | Junos | 12.1x47 | — |
| Juniper | Junos | 12.3 | R1 |
| Juniper | Junos | 12.3x48 | — |
| Juniper | Junos | 13.2 | — |
| Juniper | Junos | 13.3 | — |
| Juniper | Junos | 14.1 | — |
| Juniper | Junos | 14.2 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-3003?
How severe is CVE-2015-3003?
How do I fix CVE-2015-3003?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-2997SysAid Help Desk before 15.2 allows remote attackers to obta…
- CVE-2015-2998SysAid Help Desk before 15.2 uses a hardcoded encryption key…
- CVE-2015-2999Multiple SQL injection vulnerabilities in SysAid Help Desk b…
- CVE-2015-3000SysAid Help Desk before 15.2 allows remote attackers to caus…
- CVE-2015-3001SysAid Help Desk before 15.2 uses a hardcoded password of Pa…
- CVE-2015-3002Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.…
- CVE-2015-3004J-Web in Juniper Junos 11.4 before 11.4R12, 12.1X44 before 1…
- CVE-2015-3005Cross-site scripting (XSS) vulnerability in the Dynamic VPN …
- CVE-2015-3006On the QFX3500 and QFX3600 platforms, the number of bytes co…6.5
- CVE-2015-3007The Juniper SRX Series services gateways with Junos OS 12.1X…
- CVE-2015-3008Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.…
- CVE-2015-3010ceph-deploy before 1.5.23 uses weak permissions (644) for ce…
Are you affected by CVE-2015-3003?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST