CVE-2018-0024

EPSS 0.06%
Veröffentlicht 11.07.2018 18:29:00
Zuletzt bearbeitet 21.11.2024 03:37:22
Quelle sirt@juniper.net
CVE-Watchlists
Login
Unerledigt
Login

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 12.3 versions prior to 12.3R11 on EX Series; 14.1X53 versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100;; 15.1X49 versions prior to 15.1X49-D20 on SRX Series.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version12.1x46

   Juniper ≫ Srx100 Version-
   Juniper ≫ Srx110 Version-
   Juniper ≫ Srx1400 Version-
   Juniper ≫ Srx1500 Version-
   Juniper ≫ Srx210 Version-
   Juniper ≫ Srx220 Version-
   Juniper ≫ Srx240 Version-
   Juniper ≫ Srx300 Version-
   Juniper ≫ Srx320 Version-
   Juniper ≫ Srx340 Version-
   Juniper ≫ Srx3400 Version-
   Juniper ≫ Srx345 Version-
   Juniper ≫ Srx3600 Version-
   Juniper ≫ Srx4100 Version-
   Juniper ≫ Srx4200 Version-
   Juniper ≫ Srx5400 Version-
   Juniper ≫ Srx550 Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-
   Juniper ≫ Srx650 Version-

Juniper ≫ Junos Version12.1x46 Updated10

Juniper ≫ Junos Version12.1x46 Updated15

Juniper ≫ Junos Version12.1x46 Updated20

Juniper ≫ Junos Version12.1x46 Updated25

Juniper ≫ Junos Version12.1x46 Updated30

Juniper ≫ Junos Version12.1x46 Updated35

Juniper ≫ Junos Version12.1x46 Updated40

Juniper ≫ Junos Version12.3x48

Juniper ≫ Junos Version12.3x48 Updated10

Juniper ≫ Junos Version12.3x48 Updated15

Juniper ≫ Junos Version12.3

   Juniper ≫ Ex Rps Version-
   Juniper ≫ Ex2200 Version-
   Juniper ≫ Ex2200-c Version-
   Juniper ≫ Ex2300 Version-
   Juniper ≫ Ex2300-c Version-
   Juniper ≫ Ex3300 Version-
   Juniper ≫ Ex3400 Version-
   Juniper ≫ Ex4200 Version-
   Juniper ≫ Ex4300 Version-
   Juniper ≫ Ex4550 Version-
   Juniper ≫ Ex4600 Version-
   Juniper ≫ Ex9200 Version-

Juniper ≫ Junos Version12.3 Updater1

Juniper ≫ Junos Version12.3 Updater10

Juniper ≫ Junos Version12.3 Updater2

Juniper ≫ Junos Version12.3 Updater3

Juniper ≫ Junos Version12.3 Updater4

Juniper ≫ Junos Version12.3 Updater5

Juniper ≫ Junos Version12.3 Updater6

Juniper ≫ Junos Version12.3 Updater7

Juniper ≫ Junos Version12.3 Updater8

Juniper ≫ Junos Version12.3 Updater9

Juniper ≫ Junos Version14.1x53

   Juniper ≫ Ex2200/vc Version-
   Juniper ≫ Ex3200 Version-
   Juniper ≫ Ex3300/vc Version-
   Juniper ≫ Ex4200 Version-
   Juniper ≫ Ex4300 Version-
   Juniper ≫ Ex4550/vc Version-
   Juniper ≫ Ex4600 Version-
   Juniper ≫ Ex6200 Version-
   Juniper ≫ Ex8200/vc (xre) Version-
   Juniper ≫ Qfx3500 Version-
   Juniper ≫ Qfx3600 Version-
   Juniper ≫ Qfx5100 Version-

Juniper ≫ Junos Version14.1x53 Updated10

Juniper ≫ Junos Version14.1x53 Updated15

Juniper ≫ Junos Version14.1x53 Updated16

Juniper ≫ Junos Version14.1x53 Updated25

Juniper ≫ Junos Version14.1x53 Updated26

Juniper ≫ Junos Version14.1x53 Updated27

Juniper ≫ Junos Version15.1x49

Juniper ≫ Junos Version15.1x49 Updated10

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.188

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
sirt@juniper.net	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://www.securityfocus.com/bid/104718

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1041314

Third Party Advisory

VDB Entry

https://kb.juniper.net/JSA10857

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2018-0024

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0024

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0024

EUVD