CVE-2018-0053

vSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.

State: Published
Severity: 6.8 Medium
Published: Oct 10, 2018
Updated: Sep 17, 2024
Reserved: Nov 16, 2017

Read the record on cve.org

Description

An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without authentication when the system is initially booted up. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D30 on vSRX.

Scores

CVSS	Score	Vector	Source
3.0	6.8 Medium	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	juniper

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Junos OSJuniper Networks	15.1X49 to before 15.1X49-D30Affected

References

https://kb.juniper.net/JSA10887
1041854vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.