Read the docs
TI-2018-00014 Aliases CVE-2018-0014GHSA-xgmx-gwqj-mmc5

ScreenOS: Etherleak vulnerability found on ScreenOS device

Priority LOW 30CWE-200Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.

Why it matters now

EPSS 0.00603 49th percentileScored 2026-11-07
Fix Fixed ScreenOS (Juniper Networks): 6.3.0r25

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JuniperScreenOSall to before 6.3.0r256.3.0r25Patch availableCNA
  • ScreenOS VendorJuniper Affected all to before 6.3.0r25 Fixed in 6.3.0r25 Patch available CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:o:juniper:screenos:6.3.0r1:*:*:*:*:*:*:*6.3.0r1VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r2:*:*:*:*:*:*:*6.3.0r2VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r3:*:*:*:*:*:*:*6.3.0r3VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r4:*:*:*:*:*:*:*6.3.0r4VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r5:*:*:*:*:*:*:*6.3.0r5VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r6:*:*:*:*:*:*:*6.3.0r6VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r7:*:*:*:*:*:*:*6.3.0r7VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r8:*:*:*:*:*:*:*6.3.0r8VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r9:*:*:*:*:*:*:*6.3.0r9VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r10:*:*:*:*:*:*:*6.3.0r10VulnerableJuniper
  • cpe:2.3:o:juniper:screenos:6.3.0r1:*:*:*:*:*:*:* Versions 6.3.0r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r2:*:*:*:*:*:*:* Versions 6.3.0r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r3:*:*:*:*:*:*:* Versions 6.3.0r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r4:*:*:*:*:*:*:* Versions 6.3.0r4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r5:*:*:*:*:*:*:* Versions 6.3.0r5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r6:*:*:*:*:*:*:* Versions 6.3.0r6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r7:*:*:*:*:*:*:* Versions 6.3.0r7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r8:*:*:*:*:*:*:* Versions 6.3.0r8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r9:*:*:*:*:*:*:* Versions 6.3.0r9 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r10:*:*:*:*:*:*:* Versions 6.3.0r10 Vulnerable ·Juniper
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:juniper:screenos:6.3.0r11:*:*:*:*:*:*:*6.3.0r11VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r12:*:*:*:*:*:*:*6.3.0r12VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r13:*:*:*:*:*:*:*6.3.0r13VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r14:*:*:*:*:*:*:*6.3.0r14VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r15:*:*:*:*:*:*:*6.3.0r15VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r16:*:*:*:*:*:*:*6.3.0r16VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r17:*:*:*:*:*:*:*6.3.0r17VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r18:*:*:*:*:*:*:*6.3.0r18VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r19:*:*:*:*:*:*:*6.3.0r19VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r20:*:*:*:*:*:*:*6.3.0r20VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r21:*:*:*:*:*:*:*6.3.0r21VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r22:*:*:*:*:*:*:*6.3.0r22VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r23:*:*:*:*:*:*:*6.3.0r23VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r24:*:*:*:*:*:*:*6.3.0r24VulnerableJuniper
cpe:2.3:o:juniper:screenos:6.3.0r25:*:*:*:*:*:*:*6.3.0r25VulnerableJuniper
  • cpe:2.3:o:juniper:screenos:6.3.0r11:*:*:*:*:*:*:* Versions 6.3.0r11 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r12:*:*:*:*:*:*:* Versions 6.3.0r12 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r13:*:*:*:*:*:*:* Versions 6.3.0r13 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r14:*:*:*:*:*:*:* Versions 6.3.0r14 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r15:*:*:*:*:*:*:* Versions 6.3.0r15 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r16:*:*:*:*:*:*:* Versions 6.3.0r16 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r17:*:*:*:*:*:*:* Versions 6.3.0r17 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r18:*:*:*:*:*:*:* Versions 6.3.0r18 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r19:*:*:*:*:*:*:* Versions 6.3.0r19 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r20:*:*:*:*:*:*:* Versions 6.3.0r20 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r21:*:*:*:*:*:*:* Versions 6.3.0r21 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r22:*:*:*:*:*:*:* Versions 6.3.0r22 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r23:*:*:*:*:*:*:* Versions 6.3.0r23 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r24:*:*:*:*:*:*:* Versions 6.3.0r24 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:screenos:6.3.0r25:*:*:*:*:*:*:* Versions 6.3.0r25 Vulnerable ·Juniper

Remediation

  • Fix · CNA ScreenOS (Juniper Networks) Fixed in 6.3.0r25

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-0014
  2. 2026-10-03 Alias added: GHSA-xgmx-gwqj-mmc5

References

Advisory 1

  • TI-2015-06436 Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before… KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-01617 ScreenOS: XSS vulnerability in ScreenOS Firewall CVSS 3.0CRITICAL 9.6
  • TI-2015-06435 Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote… CVSS 3.0HIGH 8.1
  • TI-2014-02278 Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service… CVSS 2.0HIGH 7.8
  • TI-2017-01620 ScreenOS: XSS vulnerability in ScreenOS Firewall CVSS 3.0HIGH 8.4
  • TI-2017-01619 ScreenOS: XSS vulnerability in ScreenOS Firewall CVSS 3.0HIGH 8.4
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences