CVE-2018-0009: SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.
On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass condition. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71 on SRX series; 12.3X48 versions prior to 12.3X48-D55 on SRX series; 15.1X49 versions prior to 15.1X49-D100 on SRX series.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0009?
CVE-2018-0009 has been assigned a high severity level due to its potential to allow unauthorized traffic through firewall rules.
How do I fix CVE-2018-0009?
To fix CVE-2018-0009, upgrade to Juniper's recommended JUNOS versions that address the vulnerability.
What types of devices are affected by CVE-2018-0009?
CVE-2018-0009 affects various Juniper Networks SRX series devices running specific versions of JUNOS.
What impact does CVE-2018-0009 have on network security?
CVE-2018-0009 can lead to a significant security risk by allowing potentially harmful traffic to pass through despite existing firewall rules.
When was CVE-2018-0009 disclosed?
CVE-2018-0009 was disclosed on June 19, 2018, highlighting a critical vulnerability in the Juniper firewall configurations.