CVEvulnerability
CVE-2013-6618
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-11-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.
Affected configurations
• juniper junos (<= 10.4)
• juniper junos 10.0
• juniper junos 10.1
• juniper junos 10.2
• juniper junos 10.3
• juniper junos 11.4
• juniper junos 12.1
• juniper junos 12.2
• juniper junos 12.3
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10560 Vendor Advisory
- http://secunia.com/advisories/54731 Vendor Advisory
- http://www.exploit-db.com/exploits/29544 www.exploit-db.com
- http://www.securityfocus.com/bid/62305 Exploit
- http://www.securitytracker.com/id/1029016 www.securitytracker.com
- http://www.senseofsecurity.com.au/advisories/SOS-13-003 Exploit, URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87011 exchange.xforce.ibmcloud.com
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10560 Vendor Advisory
- http://secunia.com/advisories/54731 Vendor Advisory
- http://www.exploit-db.com/exploits/29544 www.exploit-db.com
- http://www.securityfocus.com/bid/62305 Exploit
- http://www.securitytracker.com/id/1029016 www.securitytracker.com
- http://www.senseofsecurity.com.au/advisories/SOS-13-003 Exploit, URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87011 exchange.xforce.ibmcloud.com