CVE-2015-3003

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-04-10 · updated 2026-06-17
Weakness: CWE-264

Description

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 allows local users to gain privileges via crafted combinations of CLI commands and arguments.

Affected products

Juniper Junos OS: 12.1x44, 12.1x44-d10, 12.1x44-d15, 12.1x44-d20, 12.1x44-d25, 12.1x44-d30 (+40)

References

http://www.securityfocus.com/bid/74023
http://www.securitytracker.com/id/1032092
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10674
http://www.securityfocus.com/bid/74023
http://www.securitytracker.com/id/1032092
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10674

Get alerted when CVE-2015-3003 or the next vulnerability affects your stack