Riskcovery

CVE-2019-0054

Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.

State
Published
Severity
6.8 Medium
Published
Oct 9, 2019
Updated
Sep 17, 2024
Reserved
Oct 11, 2018

Read the record on cve.org

Description

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.

Scores

CVSSScoreVectorSource
3.16.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Njuniper

Weaknesses

  • CWE-295 Improper Certificate Validation
  • CWE-300 Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 15.1X49 to before 15.1X49-D120Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.