{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-04-08T00:00:00", "descriptions": [{"lang": "en", "value": "On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-02-28T22:26:33", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kb.juniper.net/JSA10678"}], "solutions": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: Junos OS 12.2X50-D70 13.1X50-D30 13.2X51-D25 13.2X51-D30 13.2X52-D15 14.1X53-D10, and all subsequent releases. It is recommended to regenerate SSH keys or self signed certificates."}], "source": {"advisory": "JSA10678", "defect": ["1000779"], "discovery": "INTERNAL"}, "title": "Junos: QFX Series: Insufficient entropy on QFX3500 and QFX3600 platforms when the system boots up", "workarounds": [{"lang": "en", "value": "Avoid generating SSH keys or self-signed SSL certificates on the affected platforms until the system has been up and running for some time, allowing additional sources of randomness to generate sufficient entropy."}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "DATE_PUBLIC": "2015-04-08T16:00:00.000Z", "ID": "CVE-2015-3006", "STATE": "PUBLIC", "TITLE": "Junos: QFX Series: Insufficient entropy on QFX3500 and QFX3600 platforms when the system boots up"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://kb.juniper.net/JSA10678", "refsource": "CONFIRM", "url": "https://kb.juniper.net/JSA10678"}]}, "solution": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: Junos OS 12.2X50-D70 13.1X50-D30 13.2X51-D25 13.2X51-D30 13.2X52-D15 14.1X53-D10, and all subsequent releases. It is recommended to regenerate SSH keys or self signed certificates."}], "source": {"advisory": "JSA10678", "defect": ["1000779"], "discovery": "INTERNAL"}, "work_around": [{"lang": "en", "value": "Avoid generating SSH keys or self-signed SSL certificates on the affected platforms until the system has been up and running for some time, allowing additional sources of randomness to generate sufficient entropy."}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T05:32:21.553Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kb.juniper.net/JSA10678"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2015-3006", "datePublished": "2020-02-28T22:26:33.894969Z", "dateReserved": "2015-04-07T00:00:00", "dateUpdated": "2024-09-16T18:19:24.874Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:12.2x50:d10:*:*:*:*:*:*", "matchCriteriaId": "497821DC-B070-4EE9-93DB-49352477423A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.2x50:d20:*:*:*:*:*:*", "matchCriteriaId": "8C5F0149-58AC-4863-8FA5-3CB5B97BE4C0", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.2x50:d41.1:*:*:*:*:*:*", "matchCriteriaId": "3D56B992-5713-4656-94B7-943A3119B25D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.2x50:d42.1:*:*:*:*:*:*", "matchCriteriaId": "6436A50E-74AF-4886-8ECD-2AA37202A089", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.2x50:d56.1:*:*:*:*:*:*", "matchCriteriaId": "4F921F54-8B9D-481E-A3D8-DC485BFE2965", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.1x50:d10:*:*:*:*:*:*", "matchCriteriaId": "EC28512D-DD4A-4BD3-B717-B7989A10F0F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.1x50:d25:*:*:*:*:*:*", "matchCriteriaId": "6863F885-C2A2-48AA-969E-CC4E6BFA2C2D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*", "matchCriteriaId": "3947A516-2054-48B3-ADFD-3CF88EC2288D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*", "matchCriteriaId": "D0951235-4A0A-4200-A7B1-9FF4540A3755", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.2x51:d20.2:*:*:*:*:*:*", "matchCriteriaId": "0CE9A629-DE43-4F7C-B93E-18BC6EC10FED", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*", "matchCriteriaId": "9E3A9AB1-202A-4480-8FFD-872C79325854", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.2x52:d10:*:*:*:*:*:*", "matchCriteriaId": "1864A2D2-1FE6-4282-BB47-F5F18296D5B3", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.2x52:d5:*:*:*:*:*:*", "matchCriteriaId": "8572251A-9A0B-4C59-8AE4-691D0E0EE53B", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*", "matchCriteriaId": "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A336BD3-4AB0-4E9E-8AD5-E6413A5A53FC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F4D44B0-E6CE-4380-8712-AC832DBCB424", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability."}, {"lang": "es", "value": "En las plataformas QFX3500 y QFX3600, el n\u00famero de bytes recopilados desde la fuente de entrop\u00eda de RANDOM_INTERRUPT cuando los arranques del dispositivo son insuficientes, conllevando posiblemente a claves SSH d\u00e9biles o duplicadas o a certificados SSL/TLS auto-firmados. La entrop\u00eda aumenta despu\u00e9s que el sistema ha estado funcionando durante alg\u00fan tiempo, pero inmediatamente despu\u00e9s del arranque, la entrop\u00eda es muy lenta. Este problema s\u00f3lo afecta a los switches QFX3500 y QFX3600. Ning\u00fan otro producto o plataforma de Juniper Networks est\u00e1 afectada por esta vulnerabilidad de debilidad de la entrop\u00eda."}], "id": "CVE-2015-3006", "lastModified": "2024-11-21T02:28:29.740", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "cve@mitre.org", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-02-28T23:15:11.010", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA10678"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA10678"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-331"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}