CVE-2014-6448

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-15 · updated 2026-06-17
Weakness: CWE-269

Description

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access.

Affected products

Juniper Junos OS: 13.2, 13.2-r1, 13.2-r2, 13.2-r3, 13.2-r4, 13.2x51 (+4)

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10695
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10695

Get alerted when CVE-2014-6448 or the next vulnerability affects your stack