CVE-2018-0009

EPSS 1.27%
Veröffentlicht 10.01.2018 22:29:01
Zuletzt bearbeitet 21.11.2024 03:37:20
Erkennungen
Login

SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.

On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass condition. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71 on SRX series; 12.3X48 versions prior to 12.3X48-D55 on SRX series; 15.1X49 versions prior to 15.1X49-D100 on SRX series.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 0 Referenzen 6

NVD 40 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 12.1x46

   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -

Juniper ≫ Junos Version 12.1x46 Update d10

Juniper ≫ Junos Version 12.1x46 Update d15

Juniper ≫ Junos Version 12.1x46 Update d20

Juniper ≫ Junos Version 12.1x46 Update d25

Juniper ≫ Junos Version 12.1x46 Update d30

Juniper ≫ Junos Version 12.1x46 Update d35

Juniper ≫ Junos Version 12.1x46 Update d40

Juniper ≫ Junos Version 12.1x46 Update d45

Juniper ≫ Junos Version 12.1x46 Update d50

Juniper ≫ Junos Version 12.1x46 Update d55

Juniper ≫ Junos Version 12.1x46 Update d60

Juniper ≫ Junos Version 12.1x46 Update d65

Juniper ≫ Junos Version 12.3x48

Juniper ≫ Junos Version 12.3x48 Update d10

Juniper ≫ Junos Version 12.3x48 Update d15

Juniper ≫ Junos Version 12.3x48 Update d20

Juniper ≫ Junos Version 12.3x48 Update d25

Juniper ≫ Junos Version 12.3x48 Update d30

Juniper ≫ Junos Version 12.3x48 Update d35

Juniper ≫ Junos Version 12.3x48 Update d40

Juniper ≫ Junos Version 12.3x48 Update d45

Juniper ≫ Junos Version 12.3x48 Update d50

Juniper ≫ Junos Version 12.3x48 Update d55

Juniper ≫ Junos Version 15.1x49

Juniper ≫ Junos Version 15.1x49 Update d10

Juniper ≫ Junos Version 15.1x49 Update d100

Juniper ≫ Junos Version 15.1x49 Update d20

Juniper ≫ Junos Version 15.1x49 Update d30

Juniper ≫ Junos Version 15.1x49 Update d35

Juniper ≫ Junos Version 15.1x49 Update d40

Juniper ≫ Junos Version 15.1x49 Update d45

Juniper ≫ Junos Version 15.1x49 Update d50

Juniper ≫ Junos Version 15.1x49 Update d55

Juniper ≫ Junos Version 15.1x49 Update d60

Juniper ≫ Junos Version 15.1x49 Update d65

Juniper ≫ Junos Version 15.1x49 Update d70

Juniper ≫ Junos Version 15.1x49 Update d75

Juniper ≫ Junos Version 15.1x49 Update d80

Juniper ≫ Junos Version 15.1x49 Update d90

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.27%	0.66

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.9	2.2	3.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N
Juniper	5.4	2.2	2.7	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N