CVE-2019-0035
Summary
| CVE | CVE-2019-0035 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-04-10 20:29:00 UTC |
| Updated | 2021-02-05 16:48:00 UTC |
| Description | When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed using "set system root-authentication plain-text-password" on systems booted from an OAM (Operations, Administration, and Maintenance) volume, leading to a possible administrative bypass with physical access to the console. OAM volumes (e.g. flash drives) are typically instantiated as /dev/gpt/oam, or /oam for short. Password recovery, changing the root password from a console, should not have been allowed from an insecure console. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S12, 15.1R7-S3; 15.1X49 versions prior to 15.1X49-D160; 15.1X53 versions prior to 15.1X53-D236, 15.1X53-D496, 15.1X53-D68; 16.1 versions prior to 16.1R3-S10, 16.1R6-S6, 16.1R7-S3; 16.1X65 versions prior to 16.1X65-D49; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R3-S1; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S6, 17.4R2-S2; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S2. This issue does not affect Junos OS releases prior to 15.1. |
Risk And Classification
Problem Types: CWE-522
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Juniper | Junos | 15.1 | f2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f5 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6 | All | All |
| Operating System | Juniper | Junos | 15.1 | f7 | All | All |
| Operating System | Juniper | Junos | 15.1 | r1 | All | All |
| Operating System | Juniper | Junos | 15.1 | r2 | All | All |
| Operating System | Juniper | Junos | 15.1 | r3 | All | All |
| Operating System | Juniper | Junos | 15.1 | r4 | All | All |
| Operating System | Juniper | Junos | 15.1 | r5 | All | All |
| Operating System | Juniper | Junos | 15.1 | r6 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d10 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d100 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d110 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d120 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d130 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d150 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d35 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d50 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d65 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d70 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d75 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d80 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d90 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d10 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d21 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d210 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d230 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d231 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d232 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d233 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d32 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d33 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d34 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d495 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d56 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d61 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d62 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d63 | All | All |
| Operating System | Juniper | Junos | 16.1 | r1 | All | All |
| Operating System | Juniper | Junos | 16.1 | r2 | All | All |
| Operating System | Juniper | Junos | 16.1 | r3 | All | All |
| Operating System | Juniper | Junos | 16.1 | r4 | All | All |
| Operating System | Juniper | Junos | 16.1 | r5 | All | All |
| Operating System | Juniper | Junos | 16.1 | r6 | All | All |
| Operating System | Juniper | Junos | 16.1 | r7 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d30 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d35 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d40 | All | All |
| Operating System | Juniper | Junos | 16.2 | r1 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.1 | r1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r3 | All | All |
| Operating System | Juniper | Junos | 17.3 | r1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r1 | All | All |
| Operating System | Juniper | Junos | 18.1 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 18.2 | r1 | All | All |
| Operating System | Juniper | Junos | 18.2 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 18.2x75 | All | All | All |
| Operating System | Juniper | Junos | 18.3 | r1 | All | All |
| Operating System | Juniper | Junos | 18.3 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f5 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6 | All | All |
| Operating System | Juniper | Junos | 15.1 | f7 | All | All |
| Operating System | Juniper | Junos | 15.1 | r1 | All | All |
| Operating System | Juniper | Junos | 15.1 | r2 | All | All |
| Operating System | Juniper | Junos | 15.1 | r3 | All | All |
| Operating System | Juniper | Junos | 15.1 | r4 | All | All |
| Operating System | Juniper | Junos | 15.1 | r5 | All | All |
| Operating System | Juniper | Junos | 15.1 | r6 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d10 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d100 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d110 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d120 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d130 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d150 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d35 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d50 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d65 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d70 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d75 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d80 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d90 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d10 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d21 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d210 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d230 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d231 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d232 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d233 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d32 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d33 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d34 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d495 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d56 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d61 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d62 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d63 | All | All |
| Operating System | Juniper | Junos | 16.1 | r1 | All | All |
| Operating System | Juniper | Junos | 16.1 | r2 | All | All |
| Operating System | Juniper | Junos | 16.1 | r3 | All | All |
| Operating System | Juniper | Junos | 16.1 | r4 | All | All |
| Operating System | Juniper | Junos | 16.1 | r5 | All | All |
| Operating System | Juniper | Junos | 16.1 | r6 | All | All |
| Operating System | Juniper | Junos | 16.1 | r7 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d30 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d35 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d40 | All | All |
| Operating System | Juniper | Junos | 16.2 | r1 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.1 | r1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r3 | All | All |
| Operating System | Juniper | Junos | 17.3 | r1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r1 | All | All |
| Operating System | Juniper | Junos | 18.1 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 18.2 | r1 | All | All |
| Operating System | Juniper | Junos | 18.2 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 18.2x75 | All | All | All |
| Operating System | Juniper | Junos | 18.3 | r1 | All | All |
| Operating System | Juniper | Junos | 18.3 | r1-s1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 2019-04 Security Bulletin: Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes (CVE-2019-0035) - Juniper Networks | CONFIRM | kb.juniper.net | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.