CVE-2018-0024

EPSS 0.38%
Veröffentlicht 11.07.2018 18:29:00
Zuletzt bearbeitet 21.11.2024 03:37:22
Erkennungen
Login

Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 12.3 versions prior to 12.3R11 on EX Series; 14.1X53 versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100;; 15.1X49 versions prior to 15.1X49-D20 on SRX Series.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 6

NVD 31 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 12.1x46

   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -

Juniper ≫ Junos Version 12.1x46 Update d10

Juniper ≫ Junos Version 12.1x46 Update d15

Juniper ≫ Junos Version 12.1x46 Update d20

Juniper ≫ Junos Version 12.1x46 Update d25

Juniper ≫ Junos Version 12.1x46 Update d30

Juniper ≫ Junos Version 12.1x46 Update d35

Juniper ≫ Junos Version 12.1x46 Update d40

Juniper ≫ Junos Version 12.3x48

Juniper ≫ Junos Version 12.3x48 Update d10

Juniper ≫ Junos Version 12.3x48 Update d15

Juniper ≫ Junos Version 12.3

   Juniper ≫ Ex Rps Version -
   Juniper ≫ Ex2200 Version -
   Juniper ≫ Ex2200-c Version -
   Juniper ≫ Ex2300 Version -
   Juniper ≫ Ex2300-c Version -
   Juniper ≫ Ex3300 Version -
   Juniper ≫ Ex3400 Version -
   Juniper ≫ Ex4200 Version -
   Juniper ≫ Ex4300 Version -
   Juniper ≫ Ex4550 Version -
   Juniper ≫ Ex4600 Version -
   Juniper ≫ Ex9200 Version -

Juniper ≫ Junos Version 12.3 Update r1

Juniper ≫ Junos Version 12.3 Update r10

Juniper ≫ Junos Version 12.3 Update r2

Juniper ≫ Junos Version 12.3 Update r3

Juniper ≫ Junos Version 12.3 Update r4

Juniper ≫ Junos Version 12.3 Update r5

Juniper ≫ Junos Version 12.3 Update r6

Juniper ≫ Junos Version 12.3 Update r7

Juniper ≫ Junos Version 12.3 Update r8

Juniper ≫ Junos Version 12.3 Update r9

Juniper ≫ Junos Version 14.1x53

   Juniper ≫ Ex2200/vc Version -
   Juniper ≫ Ex3200 Version -
   Juniper ≫ Ex3300/vc Version -
   Juniper ≫ Ex4200 Version -
   Juniper ≫ Ex4300 Version -
   Juniper ≫ Ex4550/vc Version -
   Juniper ≫ Ex4600 Version -
   Juniper ≫ Ex6200 Version -
   Juniper ≫ Ex8200/vc (xre) Version -
   Juniper ≫ Qfx3500 Version -
   Juniper ≫ Qfx3600 Version -
   Juniper ≫ Qfx5100 Version -

Juniper ≫ Junos Version 14.1x53 Update d10

Juniper ≫ Junos Version 14.1x53 Update d15

Juniper ≫ Junos Version 14.1x53 Update d16

Juniper ≫ Junos Version 14.1x53 Update d25

Juniper ≫ Junos Version 14.1x53 Update d26

Juniper ≫ Junos Version 14.1x53 Update d27

Juniper ≫ Junos Version 15.1x49

Juniper ≫ Junos Version 15.1x49 Update d10

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.38%	0.294

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
Juniper	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H