CVE-2015-3007

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 before 12.1X46-D35 Junos OS versions 12.1X47 before 12.1X47-D25 Junos OS versions 12.3X48 before 12.3X48-D15

Description The issue is related to the improper implementation of the "set system ports console insecure" feature in the Juniper SRX Series services gateways. This allows physically proximate attackers to gain administrative privileges by leveraging access to the console port.

Recommendations For Junos OS versions 12.1X46 before 12.1X46-D35, update to version 12.1X46-D35 or later. For Junos OS versions 12.1X47 before 12.1X47-D25, update to version 12.1X47-D25 or later. For Junos OS versions 12.3X48 before 12.3X48-D15, update to version 12.3X48-D15 or later.