CVE-2013-6618

2013-11-0520:55:30

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-6618

remote code execution

juniper junos

security vulnerability

nvd

j-web

ajax

jsdm

port.php

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

JSON

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.

Affected configurations

NVD

Node

juniperjunosRange≤10.4

juniperjunosMatch10.0

juniperjunosMatch10.1

juniperjunosMatch10.2

juniperjunosMatch10.3

juniperjunosMatch11.4

juniperjunosMatch12.1

juniperjunosMatch12.2

juniperjunosMatch12.3

CPENameOperatorVersion
juniper:junosjuniper junosle10.4
juniper:junosjuniper junoseq10.0
juniper:junosjuniper junoseq10.1
juniper:junosjuniper junoseq10.2
juniper:junosjuniper junoseq10.3
juniper:junosjuniper junoseq11.4
juniper:junosjuniper junoseq12.1
juniper:junosjuniper junoseq12.2
juniper:junosjuniper junoseq12.3

CPE	Name	Operator	Version
juniper:junos	juniper junos	le	10.4
juniper:junos	juniper junos	eq	10.0
juniper:junos	juniper junos	eq	10.1
juniper:junos	juniper junos	eq	10.2
juniper:junos	juniper junos	eq	10.3
juniper:junos	juniper junos	eq	11.4
juniper:junos	juniper junos	eq	12.1
juniper:junos	juniper junos	eq	12.2
juniper:junos	juniper junos	eq	12.3