Strix
26.1K

CVE-2016-1265

UnknownEPSS 2.30%

Last modified

CVE-2016-1265 is a vulnerability of currently unknown severity. A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. All versions of Juniper Networks Junos Space prior to 15.1R3 are affected.. EPSS estimates a 2.30% chance of exploitation in the next 30 days.

Description

A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. All versions of Juniper Networks Junos Space prior to 15.1R3 are affected.

Metrics

EPSS Probability
2.30%

81.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
JuniperJunos Space<= 15.1r2

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2016-1265?
A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. All versions of Juniper Networks Junos Space prior to 15.1R3 are affected.
How severe is CVE-2016-1265?
Severity scoring for CVE-2016-1265 is pending analysis. The EPSS model estimates a 2.30% probability of exploitation in the next 30 days.
How do I fix CVE-2016-1265?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-1265?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST