CVE-2016-1271

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-15 · updated 2026-06-17
Weakness: CWE-20

Description

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via crafted combinations of CLI commands and arguments, a different vulnerability than CVE-2015-3003, CVE-2014-3816, and CVE-2014-0615.

Affected products

Juniper Junos OS: through 12.1x46; 12.1x47, 12.1x47-d10, 12.1x47-d15, 12.1x47-d20, 12.1x47-d25, 12.3 (+38)

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739
http://www.securitytracker.com/id/1035667
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739
http://www.securitytracker.com/id/1035667

Get alerted when CVE-2016-1271 or the next vulnerability affects your stack