PT-2019-1359 · Juniper Networks · Junos

Publicado 2019-01-09 · Atualizado 2020-12-08 · CVE-2019-0002

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Junos OS on EX2300 and EX3400 series versions prior to 15.1X53-D590 Junos OS on EX2300 and EX3400 series versions 18.1 prior to 18.1R3 Junos OS on EX2300 and EX3400 series versions 18.2 prior to 18.2R2

Description The issue is related to a stateless firewall filter configuration that uses the action 'policer' in combination with other actions, which might not take effect. This affects both IPv4 and IPv6 firewall filters. When the issue occurs, the output of the command "show pfe filter hw summary" will not show the entry for the RACL group.

Recommendations For versions prior to 15.1X53-D590, update to version 15.1X53-D590 or later. For versions 18.1 prior to 18.1R3, update to version 18.1R3 or later. For versions 18.2 prior to 18.2R2, update to version 18.2R2 or later.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

CWE-794

Identificadores relacionados

BDU:2019-00717

CVE-2019-0002

Produtos afetados

Junos

Referências · 9

• https://t.me/cvenotify/6716 · Publicação no Telegram
• http://securityfocus.com/bid/106669 · Nota
• https://juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-pfe-filter.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-0002 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-00717 · Nota de Segurança
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10901&cat=SIRT_1&actp=LIST · Nota
• https://kb.juniper.net/JSA10901 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0002 · Nota de Segurança
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10901&cat=SIRT_1&actp=LIST · Nota