How severe is CVE-2015-3006?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.5 out of 10.

What type of vulnerability is CVE-2015-3006?

This is classified as CWE-331, which is a common weakness in software security.

CVE-2015-3006 - MEDIUM Severity | CVSS 6.5

Vulnerability Description

On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability.

Related Vulnerabilities

CVE-2016-2858

MEDIUM

CVSS:6.5(Medium)

QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitr...

CWE-3312016

CVE-2018-9426

MEDIUM

CVSS:6.5(Medium)

In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no a...

CWE-3312018

CVE-2021-42138

MEDIUM

CVSS:6.5(Medium)

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.

CWE-3312021

CVE-2024-38270

MEDIUM

CVSS:6.5(Medium)

An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2....

CWE-3312024

CVE-2008-1447

MEDIUM

CVSS:6.8(Medium)

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementati...

CWE-3312008

CVE-2024-26329

MEDIUM

CVSS:6.2(Medium)

Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function.

CWE-3312024