CVE-2013-6618
HIGH severity · CVSS 9 · Improper input validation
9CVSS HIGH
Summary
jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)11%
AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10560Advisory
- http://secunia.com/advisories/54731Advisory
- http://www.exploit-db.com/exploits/29544
- http://www.securitytracker.com/id/1029016
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87011
- http://www.securityfocus.com/bid/62305Exploit
- http://www.senseofsecurity.com.au/advisories/SOS-13-003Exploit