Read the docs
TI-2018-00046 Aliases CVE-2018-0049GHSA-cvg4-hp78-jhgv

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

Priority LOW 37CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-476.

Summary

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash. Continued receipt of this specifically crafted malicious MPLS packet will cause a sustained Denial of Service condition. This issue require it to be received on an interface configured to receive this type of traffic. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D76 prior to 12.1X46-D81 on SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 12.3R12-S10; 12.3X48 versions above and including 12.3X48-D66 prior to 12.3X48-D75 on SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 14.1X53 versions above and including 14.1X53-D115 prior to 14.1X53-D130 on QFabric System; 15.1 versions above and including 15.1F6-S10; 15.1R4-S9; 15.1R6-S6; 15.1 versions above and including 15.1R7 prior to 15.1R7-S2; 15.1X49 versions above and including 15.1X49-D131 prior to 15.1X49-D150 on SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 15.1X53 versions above 15.1X53-D233 prior to 15.1X53-D235 on QFX5200/QFX5110; 15.1X53 versions up to and including 15.1X53-D471 prior to 15.1X53-D590 on NFX150, NFX250; 15.1X53-D67 on QFX10000 Series; 15.1X53-D59 on EX2300/EX3400; 16.1 versions above and including 16.1R3-S8; 16.1 versions above and including 16.1R4-S9 prior to 16.1R4-S12; 16.1 versions above and including 16.1R5-S4; 16.1 versions above and including 16.1R6-S3 prior to 16.1R6-S6; 16.1 versions above and including 16.1R7 prior to 16.1R7-S2; 16.2 versions above and including 16.2R1-S6; 16.2 versions above and including 16.2R2-S5 prior to 16.2R2-S7; 17.1R1-S7; 17.1 versions above and including 17.1R2-S7 prior to 17.1R2-S9; 17.2R1-S6; 17.2 versions above and including 17.2R2-S4 prior to 17.2R2-S6; 17.2X75 versions above and including 17.2X75-D100 prior to X17.2X75-D101, 17.2X75-D110; 17.3 versions above and including 17.3R1-S4 on All non-SRX Series and SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 17.3 versions above and including 17.3R2-S2 prior to 17.3R2-S4 on All non-SRX Series and SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 17.3R3 on All non-SRX Series and SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 17.4 versions above and including 17.4R1-S3 prior to 17.4R1-S5 on All non-SRX Series and SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 17.4R2 on All non-SRX Series and SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 18.1 versions above and including 18.1R2 prior to 18.1R2-S3, 18.1R3 on All non-SRX Series and SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 18.2 versions above and including 18.2R1 prior to 18.2R1-S2, 18.2R1-S3, 18.2R2 on All non-SRX Series and SRX100, SRX110, SRX210, SRX220, SRX240m, SRX550m SRX650, SRX300, SRX320, SRX340, SRX345, SRX1500, SRX4100, SRX4200, SRX4600 and vSRX; 18.2X75 versions above and including 18.2X75-D5 prior to 18.2X75-D20.

Why it matters now

EPSS 0.02211 82nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JuniperJunos OS12.1X46-D76 and later; 12.3X48-D66 and later; 15.1X49-D131 and later—No fix listedCNA
JuniperJunos OS12.3R12-S10; 15.1R4-S9; 15.1R6-S6; 17.1R1-S7; 17.2R1-S6; 15.1F6-S10 and later; 16.1R3-S8 and later; 16.2R1-S6 and later; 17.1R2-S7 and later; 17.2R2-S4 and later; 17.2X75-D100 and later; 18.2X75-D5 and later—No fix listedCNA
JuniperJunos OS14.1X53-D47—No fix listedCNA
JuniperJunos OS14.1X53-D115 and later—No fix listedCNA
JuniperJunos OS15.1X53-D233 and later—No fix listedCNA
JuniperJunos OS15.1X53 – 15.1X53-D471—No fix listedCNA
JuniperJunos OS15.1X53-D67—No fix listedCNA
JuniperJunos OS15.1X53-D59—No fix listedCNA
JuniperJunos OS17.3R3; 17.4R2; 17.3R1-S4 and later; 17.4R1-S3 and later; 18.1R2 and later; 18.2R1 and later—No fix listedCNA
  • Junos OS VendorJuniper Affected 12.1X46-D76 and later; 12.3X48-D66 and later; 15.1X49-D131 and later Fixed in — No fix listed CNA
  • Junos OS VendorJuniper Affected 12.3R12-S10; 15.1R4-S9; 15.1R6-S6; 17.1R1-S7; 17.2R1-S6; 15.1F6-S10 and later; 16.1R3-S8 and later; 16.2R1-S6 and later; 17.1R2-S7 and later; 17.2R2-S4 and later; 17.2X75-D100 and later; 18.2X75-D5 and later Fixed in — No fix listed CNA
  • Junos OS VendorJuniper Affected 14.1X53-D47 Fixed in — No fix listed CNA
  • Junos OS VendorJuniper Affected 14.1X53-D115 and later Fixed in — No fix listed CNA
  • Junos OS VendorJuniper Affected 15.1X53-D233 and later Fixed in — No fix listed CNA
  • Junos OS VendorJuniper Affected 15.1X53 – 15.1X53-D471 Fixed in — No fix listed CNA
  • Junos OS VendorJuniper Affected 15.1X53-D67 Fixed in — No fix listed CNA
  • Junos OS VendorJuniper Affected 15.1X53-D59 Fixed in — No fix listed CNA
  • Junos OS VendorJuniper Affected 17.3R3; 17.4R2; 17.3R1-S4 and later; 17.4R1-S3 and later; 18.1R2 and later; 18.2R1 and later Fixed in — No fix listed CNA

CPE configurations NVD · 138

CPEVersionsRoleVendor
cpe:2.3:o:juniper:junos:12.1x46:d76:*:*:*:*:*:*12.1x46 d76VulnerableJuniper
cpe:2.3:o:juniper:junos:12.1x46:d77:*:*:*:*:*:*12.1x46 d77VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d66:*:*:*:*:*:*12.3x48 d66VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:*12.3x48 d70VulnerableJuniper
cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
  • cpe:2.3:o:juniper:junos:12.1x46:d76:*:*:*:*:*:* Versions 12.1x46 d76 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.1x46:d77:*:*:*:*:*:* Versions 12.1x46 d77 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d66:*:*:*:*:*:* Versions 12.3x48 d66 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:* Versions 12.3x48 d70 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
Show 128 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:o:juniper:junos:12.3:r12-s10:*:*:*:*:*:*12.3 r12-s10VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*15.1 f6-s10VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*15.1 f6-s12VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*15.1 f7VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*15.1 rVulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*15.1 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*15.1 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*15.1 r3VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*15.1 r4VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*15.1 r4-s7VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*15.1 r4-s8VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*15.1 r4-s9VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*15.1 r5VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*15.1 r5-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*15.1 r5-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*15.1 r5-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*15.1 r5-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*15.1 r6VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*15.1 r6-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*15.1 r6-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*15.1 r6-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*15.1 r6-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*15.1 r6-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*15.1 r7VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*15.1 r7-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*16.1 r3-s8VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*16.1 r4VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*16.1 r4-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*16.1 r4-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*16.1 r4-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*16.1 r4-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*16.1 r4-s8VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*16.1 r4-s9VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*16.1 r5-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*16.1 r6VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*16.1 r6-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*16.1 r6-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*16.1 r6-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*16.1 r7VulnerableJuniper
cpe:2.3:o:juniper:junos:16.2:r1-s6:*:*:*:*:*:*16.2 r1-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*16.2 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:*16.2 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:16.2:r2-s10:*:*:*:*:*:*16.2 r2-s10VulnerableJuniper
cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:*16.2 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*16.2 r2-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:*16.2 r2-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:*17.1 r1-s7VulnerableJuniper
cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*17.1 r2-s7VulnerableJuniper
cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*17.1 r2-s8VulnerableJuniper
cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*17.2 r1-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*17.2 r2-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:17.2x75:d100:*:*:*:*:*:*17.2x75 d100VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2x75:d12:*:*:*:*:*:*18.2x75 d12VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2x75:d5:*:*:*:*:*:*18.2x75 d5VulnerableJuniper
cpe:2.3:o:juniper:junos:14.1x53:d47:*:*:*:*:*:*14.1x53 d47VulnerableJuniper
cpe:2.3:h:juniper:ex2200:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex2200-vc:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex3200:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex3300:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex3300-vc:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex4200:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex4550:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex4550-vc:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex6200:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex8200:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex8200-vc:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:o:juniper:junos:15.1x49:d131:*:*:*:*:*:*15.1x49 d131VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*15.1x49 d140VulnerableJuniper
cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*17.3 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*17.3 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*17.3 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*17.3 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*17.3 r2-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*17.3 r3VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*17.4 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*17.4 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*17.4 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*18.1 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*18.1 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*18.1 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*18.2 r1VulnerableJuniper
cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:o:juniper:junos:15.1x53:d233:*:*:*:*:*:*15.1x53 d233VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x53:d234:*:*:*:*:*:*15.1x53 d234VulnerableJuniper
cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:o:juniper:junos:15.1x53:d471:*:*:*:*:*:*15.1x53 d471VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x53:d490:*:*:*:*:*:*15.1x53 d490VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x53:d495:*:*:*:*:*:*15.1x53 d495VulnerableJuniper
cpe:2.3:h:juniper:nfx150:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:o:juniper:junos:15.1x53:d67:*:*:*:*:*:*15.1x53 d67VulnerableJuniper
cpe:2.3:h:juniper:qfx10000:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx10002-32q:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx10002-60c:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx10002-72q:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:o:juniper:junos:15.1x53:d59:*:*:*:*:*:*15.1x53 d59VulnerableJuniper
cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
  • cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:o:juniper:junos:12.3:r12-s10:*:*:*:*:*:* Versions 12.3 r12-s10 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:* Versions 15.1 f6-s10 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:* Versions 15.1 f6-s12 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:* Versions 15.1 f7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:* Versions 15.1 r Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:* Versions 15.1 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:* Versions 15.1 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:* Versions 15.1 r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:* Versions 15.1 r4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:* Versions 15.1 r4-s7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:* Versions 15.1 r4-s8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:* Versions 15.1 r4-s9 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:* Versions 15.1 r5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:* Versions 15.1 r5-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:* Versions 15.1 r5-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:* Versions 15.1 r5-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:* Versions 15.1 r5-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:* Versions 15.1 r6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:* Versions 15.1 r6-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:* Versions 15.1 r6-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:* Versions 15.1 r6-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:* Versions 15.1 r6-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:* Versions 15.1 r6-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:* Versions 15.1 r7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:* Versions 15.1 r7-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:* Versions 16.1 r3-s8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:* Versions 16.1 r4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:* Versions 16.1 r4-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:* Versions 16.1 r4-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:* Versions 16.1 r4-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:* Versions 16.1 r4-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:* Versions 16.1 r4-s8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:* Versions 16.1 r4-s9 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:* Versions 16.1 r5-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:* Versions 16.1 r6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:* Versions 16.1 r6-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:* Versions 16.1 r6-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:* Versions 16.1 r6-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:* Versions 16.1 r7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.2:r1-s6:*:*:*:*:*:* Versions 16.2 r1-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:* Versions 16.2 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:* Versions 16.2 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.2:r2-s10:*:*:*:*:*:* Versions 16.2 r2-s10 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:* Versions 16.2 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:* Versions 16.2 r2-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:* Versions 16.2 r2-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:* Versions 17.1 r1-s7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:* Versions 17.1 r2-s7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:* Versions 17.1 r2-s8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:* Versions 17.2 r1-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:* Versions 17.2 r2-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.2x75:d100:*:*:*:*:*:* Versions 17.2x75 d100 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2x75:d12:*:*:*:*:*:* Versions 18.2x75 d12 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2x75:d5:*:*:*:*:*:* Versions 18.2x75 d5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:14.1x53:d47:*:*:*:*:*:* Versions 14.1x53 d47 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:ex2200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex2200-vc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex3200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex3300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex3300-vc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex4200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex4550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex4550-vc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex6200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex8200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex8200-vc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d131:*:*:*:*:*:* Versions 15.1x49 d131 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:* Versions 15.1x49 d140 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:* Versions 17.3 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:* Versions 17.3 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:* Versions 17.3 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:* Versions 17.3 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:* Versions 17.3 r2-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:* Versions 17.3 r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:* Versions 17.4 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:* Versions 17.4 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:* Versions 17.4 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:* Versions 18.1 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:* Versions 18.1 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:* Versions 18.1 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:* Versions 18.2 r1 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x53:d233:*:*:*:*:*:* Versions 15.1x53 d233 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x53:d234:*:*:*:*:*:* Versions 15.1x53 d234 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x53:d471:*:*:*:*:*:* Versions 15.1x53 d471 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x53:d490:*:*:*:*:*:* Versions 15.1x53 d490 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x53:d495:*:*:*:*:*:* Versions 15.1x53 d495 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:nfx150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x53:d67:*:*:*:*:*:* Versions 15.1x53 d67 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:qfx10000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx10002-32q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx10002-60c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx10002-72q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x53:d59:*:*:*:*:*:* Versions 15.1x53 d59 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-0049
  2. 2026-10-03 Alias added: GHSA-cvg4-hp78-jhgv

References

  • TI-2023-18638 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01585 Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
  • TI-2025-15550 Junos OS: An local attacker with shell access can execute arbitrary code KEVCVSS 4.0MEDIUM 6.7
  • TI-2023-18644 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files KEVCVSS 3.1MEDIUM 5.3
  • TI-2023-18640 Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files KEVCVSS 3.1MEDIUM 5.3
See all 792 →

Sources