CVE-2018-0008
Summary
| CVE | CVE-2018-0008 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-01-10 22:29:00 UTC |
| Updated | 2023-11-07 02:50:00 UTC |
| Description | An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the [system scripts commit] stanza. Certain commit scripts that work without a problem during normal commit may cause unexpected behavior upon reboot which can leave the system in a state where root CLI login is allowed without a password due to the system reverting to a "safe mode" authentication state. Lastly, only logging in physically to the console port as root, with no password, will work. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71 on SRX; 12.3X48 versions prior to 12.3X48-D55 on SRX; 14.1 versions prior to 14.1R9; 14.1X53 versions prior to 14.1X53-D40 on QFX, EX; 14.2 versions prior to 14.2R7-S9, 14.2R8; 15.1 versions prior to 15.1F5-S7, 15.1F6-S8, 15.1R5-S6, 15.1R6; 15.1X49 versions prior to 15.1X49-D110 on SRX; 15.1X53 versions prior to 15.1X53-D232 on QFX5200/5110; 15.1X53 versions prior to 15.1X53-D49, 15.1X53-D470 on NFX; 15.1X53 versions prior to 15.1X53-D65 on QFX10K; 16.1 versions prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Juniper | Ex2200 | - | All | All | All |
| Hardware | Juniper | Ex2200 | - | All | All | All |
| Hardware | Juniper | Ex2300 | - | All | All | All |
| Hardware | Juniper | Ex2300 | - | All | All | All |
| Hardware | Juniper | Ex3300 | - | All | All | All |
| Hardware | Juniper | Ex3300 | - | All | All | All |
| Hardware | Juniper | Ex3400 | - | All | All | All |
| Hardware | Juniper | Ex3400 | - | All | All | All |
| Hardware | Juniper | Ex4200 | - | All | All | All |
| Hardware | Juniper | Ex4200 | - | All | All | All |
| Hardware | Juniper | Ex4300 | - | All | All | All |
| Hardware | Juniper | Ex4300 | - | All | All | All |
| Hardware | Juniper | Ex4500 | - | All | All | All |
| Hardware | Juniper | Ex4500 | - | All | All | All |
| Hardware | Juniper | Ex4550 | - | All | All | All |
| Hardware | Juniper | Ex4550 | - | All | All | All |
| Hardware | Juniper | Ex4600 | - | All | All | All |
| Hardware | Juniper | Ex4600 | - | All | All | All |
| Hardware | Juniper | Ex6200 | - | All | All | All |
| Hardware | Juniper | Ex6200 | - | All | All | All |
| Hardware | Juniper | Ex8200 | - | All | All | All |
| Hardware | Juniper | Ex8200 | - | All | All | All |
| Hardware | Juniper | Ex9200 | - | All | All | All |
| Hardware | Juniper | Ex9200 | - | All | All | All |
| Operating System | Juniper | Junos | 12.1x46 | All | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d10 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d15 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d20 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d25 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d30 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d35 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d40 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d45 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d50 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d55 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d60 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d65 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | All | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d10 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d15 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d20 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d25 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d30 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d35 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d40 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d45 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d50 | All | All |
| Operating System | Juniper | Junos | 14.1 | All | All | All |
| Operating System | Juniper | Junos | 14.1 | r1 | All | All |
| Operating System | Juniper | Junos | 14.1 | r2 | All | All |
| Operating System | Juniper | Junos | 14.1 | r3 | All | All |
| Operating System | Juniper | Junos | 14.1 | r4 | All | All |
| Operating System | Juniper | Junos | 14.1 | r5 | All | All |
| Operating System | Juniper | Junos | 14.1 | r6 | All | All |
| Operating System | Juniper | Junos | 14.1 | r7 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | All | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d10 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d15 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d16 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d26 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d27 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d35 | All | All |
| Operating System | Juniper | Junos | 14.2 | All | All | All |
| Operating System | Juniper | Junos | 14.2 | r1 | All | All |
| Operating System | Juniper | Junos | 14.2 | r2 | All | All |
| Operating System | Juniper | Junos | 14.2 | r3 | All | All |
| Operating System | Juniper | Junos | 14.2 | r4 | All | All |
| Operating System | Juniper | Junos | 14.2 | r5 | All | All |
| Operating System | Juniper | Junos | 14.2 | r6 | All | All |
| Operating System | Juniper | Junos | 14.2 | r7 | All | All |
| Operating System | Juniper | Junos | 14.2 | r8 | All | All |
| Operating System | Juniper | Junos | 15.1 | All | All | All |
| Operating System | Juniper | Junos | 15.1 | a1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f5 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6-s8 | All | All |
| Operating System | Juniper | Junos | 15.1 | r5-s6 | All | All |
| Operating System | Juniper | Junos | 15.1 | r6 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d10 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d100 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d35 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d50 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d55 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d65 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d70 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d75 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d80 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d90 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d21 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d210 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d230 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d32 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d33 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d34 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d470 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d50 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d51 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d52 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d55 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d57 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d61 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d62 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d63 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d64 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d70 | All | All |
| Operating System | Juniper | Junos | 16.1 | r1 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | All | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d10 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d15 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d20 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d25 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d30 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d35 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d40 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d45 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d50 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d55 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d60 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d65 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | All | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d10 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d15 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d20 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d25 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d30 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d35 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d40 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d45 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d50 | All | All |
| Operating System | Juniper | Junos | 14.1 | All | All | All |
| Operating System | Juniper | Junos | 14.1 | r1 | All | All |
| Operating System | Juniper | Junos | 14.1 | r2 | All | All |
| Operating System | Juniper | Junos | 14.1 | r3 | All | All |
| Operating System | Juniper | Junos | 14.1 | r4 | All | All |
| Operating System | Juniper | Junos | 14.1 | r5 | All | All |
| Operating System | Juniper | Junos | 14.1 | r6 | All | All |
| Operating System | Juniper | Junos | 14.1 | r7 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | All | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d10 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d15 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d16 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d26 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d27 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d35 | All | All |
| Operating System | Juniper | Junos | 14.2 | All | All | All |
| Operating System | Juniper | Junos | 14.2 | r1 | All | All |
| Operating System | Juniper | Junos | 14.2 | r2 | All | All |
| Operating System | Juniper | Junos | 14.2 | r3 | All | All |
| Operating System | Juniper | Junos | 14.2 | r4 | All | All |
| Operating System | Juniper | Junos | 14.2 | r5 | All | All |
| Operating System | Juniper | Junos | 14.2 | r6 | All | All |
| Operating System | Juniper | Junos | 14.2 | r7 | All | All |
| Operating System | Juniper | Junos | 14.2 | r8 | All | All |
| Operating System | Juniper | Junos | 15.1 | All | All | All |
| Operating System | Juniper | Junos | 15.1 | a1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f5 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6-s8 | All | All |
| Operating System | Juniper | Junos | 15.1 | r5-s6 | All | All |
| Operating System | Juniper | Junos | 15.1 | r6 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d10 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d100 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d35 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d50 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d55 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d65 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d70 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d75 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d80 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d90 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d21 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d210 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d230 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d32 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d33 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d34 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d470 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d50 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d51 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d52 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d55 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d57 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d61 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d62 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d63 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d64 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d70 | All | All |
| Operating System | Juniper | Junos | 16.1 | r1 | All | All |
| Hardware | Juniper | Nfx | - | All | All | All |
| Hardware | Juniper | Nfx | - | All | All | All |
| Hardware | Juniper | Qfx10000 | - | All | All | All |
| Hardware | Juniper | Qfx10000 | - | All | All | All |
| Hardware | Juniper | Qfx3500 | - | All | All | All |
| Hardware | Juniper | Qfx3500 | - | All | All | All |
| Hardware | Juniper | Qfx3600 | - | All | All | All |
| Hardware | Juniper | Qfx3600 | - | All | All | All |
| Hardware | Juniper | Qfx5100 | - | All | All | All |
| Hardware | Juniper | Qfx5100 | - | All | All | All |
| Hardware | Juniper | Qfx5110 | - | All | All | All |
| Hardware | Juniper | Qfx5110 | - | All | All | All |
| Hardware | Juniper | Qfx5200 | - | All | All | All |
| Hardware | Juniper | Qfx5200 | - | All | All | All |
| Hardware | Juniper | Srx100 | - | All | All | All |
| Hardware | Juniper | Srx100 | - | All | All | All |
| Hardware | Juniper | Srx110 | - | All | All | All |
| Hardware | Juniper | Srx110 | - | All | All | All |
| Hardware | Juniper | Srx1400 | - | All | All | All |
| Hardware | Juniper | Srx1400 | - | All | All | All |
| Hardware | Juniper | Srx1500 | - | All | All | All |
| Hardware | Juniper | Srx1500 | - | All | All | All |
| Hardware | Juniper | Srx210 | - | All | All | All |
| Hardware | Juniper | Srx210 | - | All | All | All |
| Hardware | Juniper | Srx220 | - | All | All | All |
| Hardware | Juniper | Srx220 | - | All | All | All |
| Hardware | Juniper | Srx240 | - | All | All | All |
| Hardware | Juniper | Srx240 | - | All | All | All |
| Hardware | Juniper | Srx300 | - | All | All | All |
| Hardware | Juniper | Srx300 | - | All | All | All |
| Hardware | Juniper | Srx320 | - | All | All | All |
| Hardware | Juniper | Srx320 | - | All | All | All |
| Hardware | Juniper | Srx340 | - | All | All | All |
| Hardware | Juniper | Srx340 | - | All | All | All |
| Hardware | Juniper | Srx3400 | - | All | All | All |
| Hardware | Juniper | Srx3400 | - | All | All | All |
| Hardware | Juniper | Srx345 | - | All | All | All |
| Hardware | Juniper | Srx345 | - | All | All | All |
| Hardware | Juniper | Srx3600 | - | All | All | All |
| Hardware | Juniper | Srx3600 | - | All | All | All |
| Hardware | Juniper | Srx4100 | - | All | All | All |
| Hardware | Juniper | Srx4100 | - | All | All | All |
| Hardware | Juniper | Srx4200 | - | All | All | All |
| Hardware | Juniper | Srx4200 | - | All | All | All |
| Hardware | Juniper | Srx5400 | - | All | All | All |
| Hardware | Juniper | Srx5400 | - | All | All | All |
| Hardware | Juniper | Srx550 | - | All | All | All |
| Hardware | Juniper | Srx550 | - | All | All | All |
| Hardware | Juniper | Srx5600 | - | All | All | All |
| Hardware | Juniper | Srx5600 | - | All | All | All |
| Hardware | Juniper | Srx5800 | - | All | All | All |
| Hardware | Juniper | Srx5800 | - | All | All | All |
| Hardware | Juniper | Srx650 | - | All | All | All |
| Hardware | Juniper | Srx650 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Juniper Junos Commit Script Error Lets Local Physically Local Users Obtain Root Privileges in Certain Cases - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| 2018-01 Security Bulletin: Junos: commit script may allow unauthenticated root login upon reboot (CVE-2018-0008) - Juniper Networks | CONFIRM | kb.juniper.net | Vendor Advisory |
| [cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html | lists.apache.org | ||
| Pony Mail! | MLIST | lists.apache.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.