6.5

CVE-2018-0014

ScreenOS: Etherleak vulnerability found on ScreenOS device

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Screenos Version 6.3.0r1
Juniper ≫ Screenos Version 6.3.0r2
Juniper ≫ Screenos Version 6.3.0r3
Juniper ≫ Screenos Version 6.3.0r4
Juniper ≫ Screenos Version 6.3.0r5
Juniper ≫ Screenos Version 6.3.0r6
Juniper ≫ Screenos Version 6.3.0r7
Juniper ≫ Screenos Version 6.3.0r8
Juniper ≫ Screenos Version 6.3.0r9
Juniper ≫ Screenos Version 6.3.0r10
Juniper ≫ Screenos Version 6.3.0r11
Juniper ≫ Screenos Version 6.3.0r12
Juniper ≫ Screenos Version 6.3.0r13
Juniper ≫ Screenos Version 6.3.0r14
Juniper ≫ Screenos Version 6.3.0r15
Juniper ≫ Screenos Version 6.3.0r16
Juniper ≫ Screenos Version 6.3.0r17
Juniper ≫ Screenos Version 6.3.0r18
Juniper ≫ Screenos Version 6.3.0r19
Juniper ≫ Screenos Version 6.3.0r20
Juniper ≫ Screenos Version 6.3.0r21
Juniper ≫ Screenos Version 6.3.0r22
Juniper ≫ Screenos Version 6.3.0r23
Juniper ≫ Screenos Version 6.3.0r24
Juniper ≫ Screenos Version 6.3.0r25
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.441
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:P/I:N/A:N
Juniper 4.3 2.8 1.4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securitytracker.com/id/1040185
Third Party Advisory
VDB Entry
https://kb.juniper.net/JSA10841
Vendor Advisory