Riskcovery

CVE-2018-0024

Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root

State
Published
Severity
7.8 High
Published
Jul 11, 2018
Updated
Sep 16, 2024
Reserved
Nov 16, 2017

Read the record on cve.org

Description

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 12.3 versions prior to 12.3R11 on EX Series; 14.1X53 versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100;; 15.1X49 versions prior to 15.1X49-D20 on SRX Series.

Scores

CVSSScoreVectorSource
3.07.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hjuniper

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 12.1X46 to before 12.1X46-D45Affected
  • 12.3X48 to before 12.3X48-D20Affected
  • 15.1X49 to before 15.1X49-D20Affected
Junos OSJuniper Networks
  • 12.3 to before 12.3R11Affected
Junos OSJuniper Networks
  • 14.1X53 to before 14.1X53-D30Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.