CVE-2019-0002
Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. This issue affect both IPv4 and IPv6 firewall filter.
En las series EX2300 y EX3400, la configuración sin estado del filtro del firewall que emplea la acción "policer" junto con otras acciones podría no aplicarse. Cuando este problema ocurre, el resultado del comando show pfe filter hw summary no mostrará la entrada para: RACL group. Las versiones afectadas de las series EX2300 y EX3400 con Junos OS son: 15.1X53 anterior a 15.1X53-D590; 18.1 anterior a 18.1R3 y 18.2 anterior a 18.2R2. Este problema afecta a los filtros de firewall IPv4 y IPv6.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-10-11 CVE Reserved
- 2019-01-15 CVE Published
- 2024-08-28 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-794: Incomplete Filtering of Multiple Instances of Special Elements
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/106669 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://kb.juniper.net/JSA10901 | 2020-12-08 | |
| https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-pfe-filter.html | 2020-12-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d50 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d50 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d51 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d51 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d52 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d52 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d55 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d55 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d57 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d57 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d58 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d58 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d59 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 15.1x53 Search vendor "Juniper" for product "Junos" and version "15.1x53" | d59 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r1 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r1 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r2 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r2 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r2-s1 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r2-s1 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r2-s2 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r2-s2 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r2-s4 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.1 Search vendor "Juniper" for product "Junos" and version "18.1" | r2-s4 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | - |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | - |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | r1 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | r1 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | r1-s3 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | r1-s3 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | r1-s4 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | r1-s4 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | r1-s5 |
Affected
| in | Juniper Search vendor "Juniper" | Ex2300 Search vendor "Juniper" for product "Ex2300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 18.2 Search vendor "Juniper" for product "Junos" and version "18.2" | r1-s5 |
Affected
| in | Juniper Search vendor "Juniper" | Ex3400 Search vendor "Juniper" for product "Ex3400" | - | - |
Safe
|