Skip to content
CVE Tracker
Back

CVE-2016-1265

Junos Space: privilege escalation vulnerabilities in Junos Space

Critical9.8EPSS 2.3%
Published
Updated
Reserved
Assigned by
juniper

Description

A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. All versions of Juniper Networks Junos Space prior to 15.1R3 are affected.

Scores

CVSS scores of CVE-2016-1265, by who scored it
Scored byCVSSScoreVector
juniperCNA (assigner)3.0Critical9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.0Critical9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
2.3% · top 17% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

Affected products

  • Juniper Networks · Junos OS

    • affected all versions prior to 15.1R2

What to do

Workaround: Limit access to Junos Space from only trusted networks Use administrative jump boxes with no internet access and employ anti-scripting techniques. In addition to the recommendations listed above, it is good security practice to limit the exploitable attack surface of critical infrastructure networking equipment. Use access lists or firewall filters to limit access to the devices administrative interfaces only from trusted, administrative networks or hosts.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .