CVE-2013-6618

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 11%

from disclosure to weapon7 days

Published on NVDNov 5

1st PoC+7d

exploitation probability

11%top 5% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/29544unverified exploitdbwww.exploit-db.com/exploits/29544unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10560 http://secunia.com/advisories/54731 https://exchange.xforce.ibmcloud.com/vulnerabilities/87011 http://www.exploit-db.com/exploits/29544 http://www.securityfocus.com/bid/62305 http://www.securitytracker.com/id/1029016 http://www.senseofsecurity.com.au/advisories/SOS-13-003