CVE-2018-0024 : An Improper Privilege Management vulnerability in a shell session of Juniper Net

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 12.3 versions prior to 12.3R11 on EX Series; 14.1X53 versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100;; 15.1X49 versions prior to 15.1X49-D20 on SRX Series.

Published 2018-07-11 18:29:00

Updated 2019-10-09 23:31:01

Source Juniper Networks, Inc.

View at NVD, CVE.org

Products affected by CVE-2018-0024

Juniper » Junos » Version: 12.3
cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.1x46
cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.3 Update R1
cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.3 Update R7
cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.3 Update R8
cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.1x46 Update D10
cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.1x46 Update D20
cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.3 Update R2
cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.3 Update R4
cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.3 Update R6
cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.1x46 Update D15
cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.3 Update R3
cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.3 Update R5
cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.3 Update R9
cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.3x48
cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.1x46 Update D25
cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.1x46 Update D30
cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.3x48 Update D10
cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 15.1x49
cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 14.1x53
cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2200/vc » Version: N/A
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex3300/vc » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550/vc » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Ex8200/vc (xre) » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D10
cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D16
cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2200/vc » Version: N/A
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex3300/vc » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550/vc » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Ex8200/vc (xre) » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D10
cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2200/vc » Version: N/A
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex3300/vc » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550/vc » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Ex8200/vc (xre) » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D25
cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2200/vc » Version: N/A
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex3300/vc » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550/vc » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Ex8200/vc (xre) » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D26
cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2200/vc » Version: N/A
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex3300/vc » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550/vc » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Ex8200/vc (xre) » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D15
cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2200/vc » Version: N/A
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex3300/vc » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550/vc » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Ex8200/vc (xre) » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D27
cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2200/vc » Version: N/A
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex3300/vc » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550/vc » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Ex8200/vc (xre) » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 12.3 Update R10
cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex Rps » Version: N/A
When used together with: Juniper » Ex2200 » Version: N/A
When used together with: Juniper » Ex2200-c » Version: N/A
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex2300-c » Version: N/A
When used together with: Juniper » Ex3300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4550 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex9200 » Version: N/A
Juniper » Junos » Version: 12.3x48 Update D15
cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.1x46 Update D35
cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A
Juniper » Junos » Version: 12.1x46 Update D40
cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-0024

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 19 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0024

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	Juniper Networks, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-0024

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-0024

http://www.securityfocus.com/bid/104718

Juniper Junos CVE-2018-0024 Local Privilege Escalation Vulnerability
Third Party Advisory;VDB Entry
https://kb.juniper.net/JSA10857

Juniper Networks - 2018-07 Security Bulletin: Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root (CVE-2018-0024)
Mitigation;Vendor Advisory
http://www.securitytracker.com/id/1041314

Juniper Junos Shell Privilege Management Flaw Lets Local Users Obtain Root Privileges - SecurityTracker
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2018-0024

Products affected by CVE-2018-0024

Exploit prediction scoring system (EPSS) score for CVE-2018-0024

CVSS scores for CVE-2018-0024

CWE ids for CVE-2018-0024

References for CVE-2018-0024