Home/Juniper/ScreenOS/SCREENOS-5.4-NOTE5

SCREENOS-5.4-NOTE5

ScreenOS 5.4 (select platforms, see below)

Juniper · OS release · ScreenOS Series

Unsupported since 2013-06-30 · 4881 days ago

SCREENOS-5.4-NOTE5 reached end of support on 2013-06-30 (4881 days ago).

Official Juniper notice ↗ Retrieved 2026-11-08

Suggest a correction

Notice published: 2006-07-24; 20y 4mo ago
End of software maintenance: 2013-06-30; 13y 4mo ago
End of security support: 2013-06-30; 13y 4mo ago
End of support: 2013-06-30; 13y 4mo ago

Lifecycle Milestones

Lifecycle notice published	2006-07-24	20y 4mo ago
End of software maintenance	2013-06-30	13y 4mo ago
End of security vulnerability support	2013-06-30	13y 4mo ago
Last date of support	2013-06-30	13y 4mo ago

Vendor references

Known Exploited Vulnerabilities

8 CVEs in CISA's Known Exploited Vulnerabilities catalog are recorded against the Juniper platform this release belongs to and may apply to this release; verify against the vendor advisory before acting. Juniper security vulnerability support for this release stopped on 2013-06-30. Where one applies, upgrade, isolate, or compensate.

CVE	KEV added	Vulnerability
`CVE-2015-7755`	2025-10-02	Juniper ScreenOS Improper Authentication Vulnerability KEV added 2025-10-02 Advisory 1 · Advisory 2
`CVE-2025-21590`	2025-03-13	Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability KEV added 2025-03-13 Advisory 1 · Advisory 2
`CVE-2023-36844`	2023-11-13	Juniper Junos OS EX Series PHP External Variable Modification Vulnerability KEV added 2023-11-13 Advisory 1 · Advisory 2
`CVE-2023-36845`	2023-11-13	Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability KEV added 2023-11-13 Advisory 1 · Advisory 2
`CVE-2023-36846`	2023-11-13	Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability KEV added 2023-11-13 Advisory 1 · Advisory 2
`CVE-2023-36847`	2023-11-13	Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability KEV added 2023-11-13 Advisory 1 · Advisory 2
`CVE-2023-36851`	2023-11-13	Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability KEV added 2023-11-13 Advisory 1 · Advisory 2
`CVE-2020-1631`	2022-03-25	Juniper Junos OS Path Traversal Vulnerability KEV added 2022-03-25 Advisory 1

Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.

Correlation is at the platform level, not per-OS-version (entries disclosed well before this release train shipped are left out). Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.

Is SCREENOS-5.4-NOTE5 still maintained?

No. Juniper no longer maintains SCREENOS-5.4-NOTE5; support ended on 2013-06-30. It receives no fixes of any kind, including security patches. Plan an upgrade to a maintained release. See Juniper's lifecycle bulletin.

When do security fixes for SCREENOS-5.4-NOTE5 stop?

Juniper stopped engineering fixes for SCREENOS-5.4-NOTE5, including security patches, on 2013-06-30. A device on this release cannot be patched against vulnerabilities disclosed after that date without upgrading.

What should I upgrade SCREENOS-5.4-NOTE5 to?

Upgrade to a currently maintained Juniper release. Check Juniper's release notes for the recommended version.

Which known-exploited CVEs may apply to the SCREENOS-5.4-NOTE5?

8 CVEs in CISA's Known Exploited Vulnerabilities catalog are recorded against Juniper ScreenOS and may apply to SCREENOS-5.4-NOTE5, whose security fixes stopped on 2013-06-30. Verify each against the vendor advisory for the fixed releases before acting. See the Known Exploited Vulnerabilities table for the full list.