CWE Code: 287
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Authentication
Summary: juniper junos os before 12.1x46-d50 on srx series devices reverts to "safe mode" authentication and allows root cli logins without a password after a failed upgrade to 12.1x46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the "partition" option.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-08-05
Last Modified Date: 2016-08-12