Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Junos OS: commit script may allow unauthenticated root login upon reboot (Juniper Networks Junos OS)

CVE-2018-0008
MEDIUM 6.2

At a glance

Source
NVD
EPSS
EPSS 0.45 % · percentile 39 ()
State
PUBLISHED
Published
Updated
Assigner
juniper
NVD status
Modified

Search on…

Description

An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the [system scripts commit] stanza. Certain commit scripts that work without a problem during normal commit may cause unexpected behavior upon reboot which can leave the system in a state where root CLI login is allowed without a password due to the system reverting to a "safe mode" authentication state. Lastly, only logging in physically to the console port as root, with no password, will work. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71 on SRX; 12.3X48 versions prior to 12.3X48-D55 on SRX; 14.1 versions prior to 14.1R9; 14.1X53 versions prior to 14.1X53-D40 on QFX, EX; 14.2 versions prior to 14.2R7-S9, 14.2R8; 15.1 versions prior to 15.1F5-S7, 15.1F6-S8, 15.1R5-S6, 15.1R6; 15.1X49 versions prior to 15.1X49-D110 on SRX; 15.1X53 versions prior to 15.1X53-D232 on QFX5200/5110; 15.1X53 versions prior to 15.1X53-D49, 15.1X53-D470 on NFX; 15.1X53 versions prior to 15.1X53-D65 on QFX10K; 16.1 versions prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue.

Weaknesses (CWE)

  • CWE-287 — Improper Authentication

References

Scores

VersionScoreVectorScored by
CVSS 3.0MEDIUM 6.2CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hjuniper
CVSS 3.0MEDIUM 6.2CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HNVD · sirt@juniper.net (Secondary)
CVSS 3.0MEDIUM 6.2CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0HIGH 7.2AV:L/AC:L/Au:N/C:C/I:C/A:CNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Juniper Networks · Junos OSaffected 12.1X46 < 12.1X46-D71 ; affected 12.3X48 < 12.3X48-D55 ; affected 15.1X49 < 15.1X49-D110
Juniper Networks · Junos OSaffected 14.1 < 14.1R9 ; affected 14.2 < 14.2R7-S9, 14.2R8 ; affected 15.1 < 15.1F5-S7, 15.1F6-S8, 15.1R5-S6, 15.1R6 ; affected 16.1 < 16.1R2
Juniper Networks · Junos OSaffected 14.1X53 < 14.1X53-D40
Juniper Networks · Junos OSaffected 15.1X53 < 15.1X53-D232
Juniper Networks · Junos OSaffected 15.1X53 < 15.1X53-D49, 15.1X53-D470
Juniper Networks · Junos OSaffected 15.1X53 < 15.1X53-D65

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD