Vulnerability Intelligence Report
CVE-2015-5362
The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D85, 14.1X55 before 14.1X55-D20, 14.2 before 14.2R3, 15.1 before 15.1R1, and 15.1X49 before 15.1X49-D10 allows remote attackers to cause a denial of service (bfdd crash and restart) or execute arbitrary code via a crafted BFD packet.
No Active Exploit Signals
CVSS Base Score
9.3
HIGH
EPSS Probability:3.81%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| juniper | junos | 12.1x44, 12.1x46, 12.1x47, 12.3, 12.3x48, 13.2, 13.3, 14.1, 14.1x53, 14.2, 15.1, 15.1x49 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
3.805%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2015-07-01T00:00:00 |
| Published | 2015-07-14T17:00:00 |
| Patch Date | 2015-07-10 |
| Last Updated | 2024-08-06T06:41:09 |
Community Chatter & Buzz