CVE Vulnerabilities

CVE-2018-0053

Improper Authentication

Published: Oct 10, 2018 | Modified: Oct 09, 2019
CVSS 3.x
6.8
MEDIUM
Source:
NVD
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without authentication when the system is initially booted up. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D30 on vSRX.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Junos Juniper 15.1x49 (including) 15.1x49 (including)
Junos Juniper 15.1x49-d10 (including) 15.1x49-d10 (including)
Junos Juniper 15.1x49-d20 (including) 15.1x49-d20 (including)

Potential Mitigations

References