CVE Vulnerability

CVE-2019-0002

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. This issue affect both IPv4 and IPv6 firewall filter.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-pfe-filter.html Vendor Advisory
https://kb.juniper.net/JSA10901 Vendor Advisory
http://www.securityfocus.com/bid/106669 Third Party Advisory VDB Entry
Configurations

Configuration 1
Information

Published : 2019-01-15 09:29

Updated : 2020-12-08 02:28

NVD link : CVE-2019-0002

Mitre link : CVE-2019-0002

Products Affected

Ex2300

Ex3400

Juniper

Junos

CWE
NVD-CWE-noinfo