PT-2019-2078 · Juniper Networks · Junos

Published 2019-04-10 · Updated 2020-09-29 · CVE-2019-0041

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R1-S2 Junos OS version 18.2R2

Description The issue is related to errors in security settings, allowing a remote attacker to impact the integrity and availability of protected information. On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface, potentially causing the device to fail to forward such traffic.

Recommendations For Junos OS versions prior to 18.2R1-S2, update to version 18.2R1-S2 or later. For Junos OS version 18.2R2, consider applying configuration changes to restrict access to the control plane via loopback interface until a patch is available.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

CWE-254

Related Identifiers

BDU:2019-01826

CVE-2019-0041

Affected Products

Junos

References · 6

• https://osv.dev/vulnerability/CVE-2019-0041 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0041 · Security Note
• https://bdu.fstec.ru/vul/2019-01826 · Security Note
• https://kb.juniper.net/JSA10933 · Vendor Advisory
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10933&cat=SIRT_1&actp=LIST&showDraft=false · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10933&cat=SIRT_1&actp=LIST&showDraft=false · Note