CVE-2015-7756
Last modified
CVE-2015-7756 is a vulnerability of currently unknown severity. The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 makes it easier for remote attackers to discover the plaintext content of VPN sessions by sniffing the network for ciphertext data and conducting an unspecified decryption attack.. EPSS estimates a 2.45% chance of exploitation in the next 30 days.
Description
The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 makes it easier for remote attackers to discover the plaintext content of VPN sessions by sniffing the network for ciphertext data and conducting an unspecified decryption attack.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Screenos | 6.2.0r15 | — |
| Juniper | Screenos | 6.2.0r16 | — |
| Juniper | Screenos | 6.2.0r17 | — |
| Juniper | Screenos | 6.2.0r18 | — |
| Juniper | Screenos | 6.3.0 | R12 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-7756?
How severe is CVE-2015-7756?
How do I fix CVE-2015-7756?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-7749The PFE daemon in Juniper vSRX virtual firewalls with Junos …
- CVE-2015-7750The L2TP packet processing functionality in Juniper Netscree…
- CVE-2015-7751Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-…
- CVE-2015-7752The SSH server in Juniper Junos OS before 12.1X44-D50, 12.1X…
- CVE-2015-7754Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured…
- CVE-2015-7755Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before …9.8
- CVE-2015-7757Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2015-7758Gummi 0.6.5 allows local users to write to arbitrary files v…
- CVE-2015-7759BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, …
- CVE-2015-7760libxpc in launchd in Apple OS X before 10.11 does not restri…
- CVE-2015-7761Mail in Apple OS X before 10.11 does not properly recognize …
- CVE-2015-7762rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 doe…
Are you affected by CVE-2015-7756?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST