CVE-2016-1260

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-01-15 · updated 2026-06-17
Weakness: CWE-399

Description

Juniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300 series switches allow remote attackers to cause a denial of service (network loop and bandwidth consumption) via unspecified vectors related to Spanning Tree Protocol (STP) traffic.

Affected products

Juniper Junos OS: 13.2x51-d15, 13.2x51-d20, 13.2x51-d21, 13.2x51-d25, 13.2x51-d26, 13.2x51-d30 (+7)

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10719
http://www.securitytracker.com/id/1035106
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10719
http://www.securitytracker.com/id/1035106

Get alerted when CVE-2016-1260 or the next vulnerability affects your stack