PT-2019-2078 · Juniper Networks · Junos

Publicado 2019-04-10 · Atualizado 2020-09-29 · CVE-2019-0041

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R1-S2 Junos OS version 18.2R2

Description The issue is related to errors in security settings, allowing a remote attacker to impact the integrity and availability of protected information. On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface, potentially causing the device to fail to forward such traffic.

Recommendations For Junos OS versions prior to 18.2R1-S2, update to version 18.2R1-S2 or later. For Junos OS version 18.2R2, consider applying configuration changes to restrict access to the control plane via loopback interface until a patch is available.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

CWE-254

Identificadores relacionados

BDU:2019-01826

CVE-2019-0041

Produtos afetados

Junos

Referências · 6

• https://osv.dev/vulnerability/CVE-2019-0041 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0041 · Nota de Segurança
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10933&cat=SIRT_1&actp=LIST&showDraft=false · Nota
• https://bdu.fstec.ru/vul/2019-01826 · Nota de Segurança
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10933&cat=SIRT_1&actp=LIST&showDraft=false · Nota
• https://kb.juniper.net/JSA10933 · Aviso do Fabricante