PT-2019-3869 · Juniper Networks · Junos

Published 2019-10-09 · Updated 2021-02-05 · CVE-2019-0070

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R1 on NFX Series.

Description The issue is caused by insufficient input validation, allowing a malicious local attacker to elevate their permissions and execute commands outside their authorized scope of control, potentially leading to full control of the system.

Recommendations For Junos OS versions prior to 18.2R1 on NFX Series, update to version 18.2R1 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-04260

CVE-2019-0070

Affected Products

Junos

References · 4

• https://osv.dev/vulnerability/CVE-2019-0070 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0070 · Security Note
• https://bdu.fstec.ru/vul/2019-04260 · Security Note
• https://kb.juniper.net/JSA10977 · Vendor Advisory