VYPR
Get started
← All advisories
Critical severity9.8NVD Advisory· Published Oct 13, 2017· Updated May 13, 2026

CVE-2017-10615

CVE-2017-10615

Description

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

Affected products

30
  • Juniper Networks/Junos29 versions
    cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*+ 28 more
    • cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*
  • Juniper Networks/Junos OSv5
    Range: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.