What is CVE-2016-1273?

CVE-2016-1273 is a medium-severity vulnerability in Juniper Junos, classified under Cryptographic Issues. CVSS score: 5.9/10. Published 2016-04-15.

How severe is CVE-2016-1273?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Juniper Junos

CVE-2016-1273

Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.007 (48.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Juniper Junos — versions 14.1x53, 15.1, 15.1x49
Juniper Qfx10002
Juniper Qfx5100
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2016-1273?: CVE-2016-1273 is a medium-severity vulnerability in Juniper Junos, classified under Cryptographic Issues. CVSS score: 5.9/10. Published 2016-04-15.
How severe is CVE-2016-1273?: Medium severity. CVSS v3 base score is 5.9 out of 10.