Juniper Junos CVE-2018-0009 Security Bypass Vulnerability

Bugtraq ID:	102491
Class:	Configuration Error
CVE:	CVE-2018-0009
Remote:	Yes
Local:	No
Published:	Jan 10 2018 12:00AM
Updated:	Jan 10 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper SRX Series 0 Juniper Junos 15.1X49-D80 Juniper Junos 15.1X49-D70 Juniper Junos 15.1X49-D60 Juniper Junos 15.1X49-D40 Juniper Junos 15.1X49-D30 Juniper Junos 15.1X49-D20 Juniper Junos 15.1X49-D15 Juniper Junos 15.1X49-D10 Juniper Junos 15.1X49 Juniper Junos 12.3X48-D51 Juniper Junos 12.3X48-D50 Juniper Junos 12.3X48-D45 Juniper Junos 12.3X48-D40 Juniper Junos 12.3X48-D35 Juniper Junos 12.3X48-D30 Juniper Junos 12.3X48-D25 Juniper Junos 12.3X48-D20 Juniper Junos 12.3X48-D15 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48 Juniper Junos 12.1X46-D67 Juniper Junos 12.1X46-D66 Juniper Junos 12.1X46-D65 Juniper Junos 12.1X46-D60 Juniper Junos 12.1X46-D55 Juniper Junos 12.1X46-D51 Juniper Junos 12.1X46-D50 Juniper Junos 12.1X46-D46 Juniper Junos 12.1X46-D45 Juniper Junos 12.1X46-D40 Juniper Junos 12.1X46-D37 Juniper Junos 12.1X46-D36 Juniper Junos 12.1X46-D35 Juniper Junos 12.1X46-D30 Juniper Junos 12.1X46-D26 Juniper JUNOS 12.1X46-D25 Juniper Junos 12.1X46-D20 Juniper Junos 12.1X46-D15 Juniper Junos 12.1X46-D10 Juniper Junos 12.1X46
Not Vulnerable:	Juniper Junos 15.1X49-D100 Juniper Junos 12.3X48-D55 Juniper Junos 12.1X46-D71

Juniper Junos CVE-2018-0009 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Junos CVE-2018-0009 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos CVE-2018-0009 Security Bypass Vulnerability

References:

• Juniper HomePage (Juniper)
  
• Junos Homepage (Juniper Networks)
  
• SRX Series: Firewall bypass vulnerability when UUID with leading zeros is config (Juniper)