CVE Vulnerabilities

CVE-2019-0058

Published: Oct 09, 2019 | Modified: Aug 24, 2020
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D80 on SRX Series.

Affected Software

Name Vendor Start Version End Version
Junos Juniper 12.3x48 (including) 12.3x48 (including)
Junos Juniper 12.3x48-d10 (including) 12.3x48-d10 (including)
Junos Juniper 12.3x48-d15 (including) 12.3x48-d15 (including)
Junos Juniper 12.3x48-d20 (including) 12.3x48-d20 (including)
Junos Juniper 12.3x48-d25 (including) 12.3x48-d25 (including)
Junos Juniper 12.3x48-d30 (including) 12.3x48-d30 (including)
Junos Juniper 12.3x48-d35 (including) 12.3x48-d35 (including)
Junos Juniper 12.3x48-d40 (including) 12.3x48-d40 (including)
Junos Juniper 12.3x48-d45 (including) 12.3x48-d45 (including)
Junos Juniper 12.3x48-d50 (including) 12.3x48-d50 (including)
Junos Juniper 12.3x48-d55 (including) 12.3x48-d55 (including)
Junos Juniper 12.3x48-d60 (including) 12.3x48-d60 (including)
Junos Juniper 12.3x48-d65 (including) 12.3x48-d65 (including)
Junos Juniper 12.3x48-d70 (including) 12.3x48-d70 (including)
Junos Juniper 12.3x48-d75 (including) 12.3x48-d75 (including)

References