CVE-2015-7755 Juniper ScreenOS Improper Authentication
Remote attackers can gain administrative access to Juniper ScreenOS devices via SSH or Telnet using an unspecified password.
- Exploited in the wild
- Since 2 Oct 2025
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-7755?
CVE-2015-7755 is a critical authentication bypass vulnerability in n/a, published on 19 Dec 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 allows remote attackers to obtain administrative access by entering an unspecified password during a (1) SSH or (2) TELNET session.
Weakness: CWE-287
Which versions are affected by CVE-2015-7755?
It affects 1 product.
Products include Juniper Screenos.
How do I fix CVE-2015-7755?
No fix has been published for CVE-2015-7755 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 23 Oct 2025.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2015-7755 being exploited?
Yes. Attackers have exploited CVE-2015-7755 in the wild since at least 2 Oct 2025.
Public exploit code: 1 Metasploit module and 2 proofs of concept on GitHub.
Other vulnerabilities in n/a
- CVE-2017-2336 ScreenOS: XSS vulnerability in ScreenOS Firewall
- CVE-2017-2335 ScreenOS: XSS vulnerability in ScreenOS Firewall
- CVE-2017-2337 ScreenOS: XSS vulnerability in ScreenOS Firewall
- CVE-2017-2338 ScreenOS: XSS vulnerability in ScreenOS Firewall
- CVE-2017-2339 ScreenOS: XSS vulnerability in ScreenOS Firewall
Sources
Also known as GHSA-43vr-5w6h-pr3g.