PT-2018-1754 · Juniper Networks · Junos

Publicado 2018-10-10 · Atualizado 2019-10-09 · CVE-2018-0053

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1X49-D30 on vSRX.

Description An authentication bypass issue in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without authentication when the system is initially booted up. The vulnerability is related to weaknesses in the authentication procedure during system startup.

Recommendations For versions prior to 15.1X49-D30, update to version 15.1X49-D30 or later to resolve the issue. As a temporary workaround, consider restricting access to the system during the initial boot sequence to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2018-01354

CVE-2018-0053

Produtos afetados

Junos

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-0053 · Aviso do Fabricante
• https://kb.juniper.net/JSA10887 · Aviso do Fabricante
• http://securitytracker.com/id/1041854 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0053 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-01354 · Nota de Segurança