CVE-2013-3497: Medium severity juniper networks junos space vulnerability
Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3497?
CVE-2013-3497 is considered a high severity vulnerability due to the exposure of cleartext passwords.
How do I fix CVE-2013-3497?
To mitigate CVE-2013-3497, upgrade Junos Space to version 12.3P2.8 or later to eliminate cleartext password exposure.
What systems are affected by CVE-2013-3497?
CVE-2013-3497 affects Juniper Networks Junos Space versions 1.0 through 12.3 and the Junos Space JA1500 appliance.
What type of attack does CVE-2013-3497 facilitate?
CVE-2013-3497 facilitates physical access attacks where an attacker can read cleartext passwords from the screen.
Is CVE-2013-3497 a remote or local vulnerability?
CVE-2013-3497 is a local vulnerability, requiring physical access to the workstation display to exploit.