CVE-2018-0024: Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root

Published Jul 11, 2018

Updated

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 12.3 versions prior to 12.3R11 on EX Series; 14.1X53 versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100;; 15.1X49 versions prior to 15.1X49-D20 on SRX Series.

Affected Software

72 affected components

Juniper Junos=12.1x46

Juniper Junos=12.1x46-d10

Juniper Junos=12.1x46-d15

Juniper Junos=12.1x46-d20

Juniper Junos=12.1x46-d25

Juniper Junos=12.1x46-d30

Juniper Junos=12.1x46-d35

Juniper Junos=12.1x46-d40

Juniper SRX100

Juniper SRX110

Juniper SRX1400

Juniper SRX1500

Juniper SRX210

Juniper SRX220

Juniper SRX240

Juniper SRX300

Juniper SRX320

Juniper SRX340

Juniper SRX3400

Juniper SRX345

Juniper SRX3600

Juniper SRX4100

Juniper SRX4200

Juniper SRX5400

Juniper SRX550

Juniper SRX5600

Juniper SRX5800

Juniper SRX650

Juniper Junos=12.3x48

Juniper Junos=12.3x48-d10

Juniper Junos=12.3x48-d15

Juniper Junos=12.3

Juniper Junos=12.3-r1

Juniper Junos=12.3-r10

Juniper Junos=12.3-r2

Juniper Junos=12.3-r3

Juniper Junos=12.3-r4

Juniper Junos=12.3-r5

Juniper Junos=12.3-r6

Juniper Junos=12.3-r7

Juniper Junos=12.3-r8

Juniper Junos=12.3-r9

Juniper Ex Rps

Juniper EX2200

Juniper EX2200-C

Juniper EX2300

Juniper EX2300-C

Juniper EX3300

Juniper EX3400

Juniper EX4200

Juniper EX4300

Juniper EX4550

Juniper EX4600

Juniper EX9200

Juniper Junos=14.1x53

Juniper Junos=14.1x53-d10

Juniper Junos=14.1x53-d15

Juniper Junos=14.1x53-d16

Juniper Junos=14.1x53-d25

Juniper Junos=14.1x53-d26

Juniper Junos=14.1x53-d27

Juniper Ex2200\/vc

Juniper EX3200

Juniper Ex3300\/vc

Juniper Ex4550\/vc

Juniper EX6200

Juniper Ex8200\/vc \(xre\)

Juniper QFX3500

Juniper QFX3600

Juniper QFX5100

Juniper Junos=15.1x49

Juniper Junos=15.1x49-d10

Remediation

Information

The following software releases have been updated to resolve this specific issue: Junos OS 12.1X46-D45, 12.3X48-D20, 12.3R11, 14.1X53-D30, 15.1X49-D20 and all subsequent releases.

Event History

Jul 11, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0024?

CVE-2018-0024 is classified as a critical vulnerability due to its potential to grant unauthorized access to system controls.

How do I fix CVE-2018-0024?

To mitigate CVE-2018-0024, upgrade to Junos OS version 12.1X46-D45 or later.

Which Juniper products are affected by CVE-2018-0024?

CVE-2018-0024 affects specific versions of Junos OS, particularly the 12.1X46 series prior to 12.1X46-D45 on SRX Series devices.

Can an unauthenticated attacker exploit CVE-2018-0024?

No, CVE-2018-0024 requires authenticated access, though it allows unprivileged users to escalate their privileges.

What type of vulnerability is CVE-2018-0024?

CVE-2018-0024 is an improper privilege management vulnerability that can lead to full system control.