screenos vulnerabilities and fixes

Recent CVEs affecting screenos, with upgrade or downgrade steps. 18 tracked.

screenos has 18 tracked vulnerabilities, 2 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 7. Most recent: 2018-01-10. Highest priority: CVE-2015-7755 (score 97/100).

• CVE-2018-0014 MEDIUM 4.3 MITIGATE Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fr
• CVE-2017-2339 HIGH 8.4 MITIGATE A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firew
• CVE-2017-2338 HIGH 8.4 MITIGATE A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firew
• CVE-2017-2337 HIGH 8.4 MITIGATE A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firew
• CVE-2017-2336 CRITICAL 9.6 MITIGATE A reflected cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewa
• CVE-2017-2335 HIGH 8.4 MITIGATE A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firew
• CVE-2016-1268 HIGH 7.5 MITIGATE The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause
• CVE-2015-7756 MEDIUM 5.0 MITIGATE The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r
• CVE-2015-7755 CRITICAL 9.8 EXPLOITED MITIGATE Juniper ScreenOS Improper Authentication Vulnerability
• CVE-2015-7754 HIGH 8.1 UPGRADE Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a d
• CVE-2015-7750 MEDIUM 5.0 UPGRADE The L2TP packet processing functionality in Juniper Netscreen and ScreenOS Firewall products with ScreenOS bef
• CVE-2014-3814 HIGH 7.8 UPGRADE MITIGATE The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the intern
• CVE-2014-3813 HIGH 7.8 UPGRADE MITIGATE Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17, whe
• CVE-2014-2842 HIGH 7.8 UPGRADE Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and restart or fa
• CVE-2013-7313 MEDIUM 5.4 MITIGATE MITIGATE The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider th
• CVE-2013-6958 HIGH 7.1 MITIGATE MITIGATE Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is disabled, allow
• CVE-2002-2266 MEDIUM 5.0 DOWNGRADE NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to ca
• CVE-2002-2234 MEDIUM 4.3 DOWNGRADE NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitt

FAQ

How do I fix screenos vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is screenos being exploited right now?

Yes: 1 screenos CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which screenos CVE should I patch first?

CVE-2015-7755 currently ranks highest (97/100): Juniper ScreenOS Improper Authentication Vulnerability.

RSS feed for screenos · ← Back to latest CVEs