Zero-day vulnerability in Juniper ScreenOS
Information disclosure
CVE-2015-7756
Revealed during source code review by the vendor.
Vulnerability details
Advisory: SB2015121701 - Two backdoors in Juniper ScreenOS
Vulnerable component: Juniper ScreenOS
CVE-ID: CVE-2015-7756
CVSSv3 score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C
CWE-ID: CWE-327 - Use of a Broken or Risky Cryptographic Algorithm
Description:
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to usage of insecure encryption keys. A remote attacker can with ability to monitor VPN traffic can intercept and decrypt it.
Successful exploitation of the vulnerability results in information disclosure on the target system.
Note: the vulnerability was disclosed as part of two backdoors during internal source code audit.
External links:
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713&cat=SIRT_1&actp=LIST
https://blog.cryptographyengineering.com/2015/12/22/on-juniper-backdoor/
http://securityaffairs.co/wordpress/42983/hacking/juniper-backdoor-attacks-honeypot.html
https://adamcaudill.com/2015/12/17/much-ado-about-juniper/
http://www.dmnews.com/news-bytes/juniper-warns-of-two-attacks-of-unauthorised-code-on-its-routers/ar...
http://resources.infosecinstitute.com/infosec-year-end-highlights/#gref
https://www.wired.com/2015/12/researchers-solve-the-juniper-mystery-and-they-say-its-partially-the-n...
https://thehackernews2.blogspot.com/2016/12/backdoor-found-in-sonys-ip-security.html
http://blogs.splunk.com/2016/01/05/discover-and-monitor-juniper-vulnerability-cve-2015-7755-exploits...
http://www.securityweek.com/juniper-firewall-backdoor-password-found-6-hours
http://www.theregister.co.uk/2015/12/20/juniper_details_two_attacks_from_unauthorised_code/