Riskcovery

CVE-2018-0062

Junos OS: Denial of Service in J-Web

State
Published
Severity
5.3 Medium
Published
Oct 10, 2018
Updated
Sep 17, 2024
Reserved
Nov 16, 2017

Read the record on cve.org

Description

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform J-Web operations. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D60 on SRX Series; 15.1 versions prior to 15.1R7; 15.1F6; 15.1X49 versions prior to 15.1X49-D120 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400 Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D470, 15.1X53-D495 on NFX Series; 16.1 versions prior to 16.1R6; 16.2 versions prior to 16.2R2-S6, 16.2R3; 17.1 versions prior to 17.1R2-S6, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R2. No other Juniper Networks products or platforms are affected by this issue.

Scores

CVSSScoreVectorSource
3.05.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Ljuniper

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 12.1X46 to before 12.1X46-D77Affected
  • 12.3X48 to before 12.3X48-D60Affected
  • 15.1X49 to before 15.1X49-D120Affected
Junos OSJuniper Networks
  • 15.1F6Affected
  • 12.3 to before 12.3R12-S10Affected
  • 15.1 to before 15.1R7Affected
  • 16.1 to before 16.1R6Affected
  • 16.2 to before 16.2R2-S6, 16.2R3Affected
  • 17.1 to before 17.1R2-S6, 17.1R3Affected
  • 17.2 to before 17.2R3Affected
  • 17.3 to before 17.3R2Affected
Junos OSJuniper Networks
  • 15.1X53 to before 15.1X53-D59Affected
Junos OSJuniper Networks
  • 15.1X53 to before 15.1X53-D67Affected
Junos OSJuniper Networks
  • 15.1X53 to before 15.1X53-D234Affected
Junos OSJuniper Networks
  • 15.1X53 to before 15.1X53-D470, 15.1X53-D495Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.