What is CVE-2015-7756?

CVE-2015-7756 is a vulnerability in Juniper Screenos, classified under Cryptographic Issues. Published 2015-12-19.

Is CVE-2015-7756 known to be exploited?

12 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Juniper Screenos

CVE-2015-7756

The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 makes it easier for remote attackers to discover the plaintext content of VPN sessions by sniffing the network for ciphertext data and conducting an unspecified decryption attack.

Vulnerability class: POODLE (CVE-2014-3566)

Published 2015-12-19 · last modified 2026-06-17.

CVSS v2 metric

CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.025 (84.4th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 84th percentile — 84.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.025 · newest: 0.025 · change: 0.000

Affected products

Juniper Screenos — versions 6.2.0r15, 6.2.0r16, 6.2.0r17

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2015-7756?: CVE-2015-7756 is a vulnerability in Juniper Screenos, classified under Cryptographic Issues. Published 2015-12-19.
Is CVE-2015-7756 known to be exploited?: 12 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.