Unrated severityNVD Advisory· Published Apr 10, 2015· Updated Jun 17, 2026
CVE-2015-3002
CVE-2015-3002
Description
Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, and 12.3X48 before 12.3X48-D10 on SRX series devices does not properly enforce the log-out-on-disconnect feature when configured in the [system port console] stanza, which allows physically proximate attackers to reconnect to the console port and gain administrative access by leveraging access to the device.
Affected products
23cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x45:d10:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x45:d15:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x45:d20:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x45:d30:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x48:*:*:*:*:*:*:*
- (no CPE)range: 12.1X44 before 12.1X44-D45; 12.1X46 before 12.1X46-D30; 12.1X47 before 12.1X47-D15; 12.3X48 before 12.3X48-D10
Patches
Vulnerability mechanics
References
3- kb.juniper.net/InfoCenter/indexnvdVendor Advisory
- www.securityfocus.com/bid/74019nvd
- www.securitytracker.com/id/1032091nvd
News mentions
0No linked articles in our index yet.