CVE-2015-7755
CRITICAL KEVJuniper ScreenOS 6.2.0r15-6.2.0r18, 6.3.0r12-6.3.0r20 - Remote Admin Access via Hardcoded Password
Title source: llmExploitation Summary
CVE-2015-7755 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 2, 2025.
EIP tracks 3 public exploits from researchers including hdm, cinno, including a Metasploit module auxiliary/scanner/ssh/juniper_backdoor.
AI-analyzed exploit summary This repository provides detailed analysis and firmware binaries related to Juniper ScreenOS backdoors (CVE-2015-7755 and CVE-2015-7756), including decompiled code and version-specific findings. It references external technical blog posts for deeper insights into the authentication bypass and cryptographic weaknesses.
Description
Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 allows remote attackers to obtain administrative access by entering an unspecified password during a (1) SSH or (2) TELNET session.
Exploits (3)
This repository provides detailed analysis and firmware binaries related to Juniper ScreenOS backdoors (CVE-2015-7755 and CVE-2015-7756), including decompiled code and version-specific findings. It references external technical blog posts for deeper insights into the authentication bypass and cryptographic weaknesses.
This repository contains a functional PoC for CVE-2015-7755, a Juniper ScreenOS backdoor vulnerability. The script attempts to authenticate via SSH using a hardcoded backdoor password to identify vulnerable hosts.
This Metasploit module scans for the Juniper SSH backdoor (CVE-2015-7755) by attempting to authenticate with a hardcoded password. It verifies the presence of the vulnerability without executing malicious payloads.
References (12)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H