# CVE-2015-7755: Juniper ScreenOS Authentication Backdoor - Host: [community.rapid7.com](https://links.thingelstad.xyz/hosts/community.rapid7.com/) - Saved: December 23, 2015 (2015-12-23T10:30:08Z) - Record: https://links.thingelstad.xyz/links/4bd9b367713b/ - JSON: https://links.thingelstad.xyz/links/4bd9b367713b.json ## From the page (probably an excerpt, not Jamie's words) On December 18th, 2015 Juniper issued an advisory indicating that they had discovered unauthorized code in the ScreenOS software that powers their Netscreen firewalls. This advisory covered two distinct issues; a backdoor in the VPN implementation that allows a passive eavesdropper to decrypt traffic and a second backdoor that allows an attacker to bypass authentication in the SSH and Telnet daemons. Shortly after Juniper posted the advisory, an employee of Fox-IT stated that they were able to identify the backdoor password in six hours. A quick Shodan search identified approximately 26,000 internet-facing Netscreen devices with SSH open. Given the severity of this issue, we decided to investigate. ## Facts - Kind: [Page](https://links.thingelstad.xyz/kinds/page/) ## Saved the same week - [The Bro Network Security Monitor](https://links.thingelstad.xyz/links/2a76c9015c8a/) (bro.org, December 23, 2015) - [Love in the Age of Big Data](https://links.thingelstad.xyz/links/fd1c41e0332b/) (highline.huffingtonpost.com, December 23, 2015) - [Leveling Up Your Organization With System Reviews](https://links.thingelstad.xyz/links/ebfb49281706/) (codeascraft.com, December 23, 2015) - [My Must-Have iOS Apps, 2015 Edition](https://links.thingelstad.xyz/links/845d850de7fb/) (macstories.net, December 23, 2015) - [Things Software Leaders Should Know](https://links.thingelstad.xyz/links/74c3f5abba36/) (ben.gracewood.nz, December 23, 2015) ## Elsewhere - Wayback Machine: https://web.archive.org/web/*/https://community.rapid7.com/community/infosec/blog/2015/12/20/cve-2015-7755-juniper-screenos-authentication-backdoor