CVE-2018-0035: Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images
First published: Wed Jul 11 2018(Updated: )
QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been upgraded to these releases using the .bin or .iso images may contain an unintended additional Open Network Install Environment (ONIE) partition. This additional partition allows the superuser to reboot to the ONIE partition which will wipe out the content of the Junos partition and its configuration. Once rebooted, the ONIE partition will not have root password configured, thus any user can access the console or SSH, using an IP address acquired from DHCP, as root without password. Once the device has been shipped or upgraded with the ONIE partition installed, the issue will persist. Simply upgrading to higher release via the CLI will not resolve the issue. No other Juniper Networks products or platforms are affected by this issue.
Credit: sirt@juniper.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper JUNOS | =15.1x53-d21 | |
| Juniper JUNOS | =15.1x53-d30 | |
| Juniper JUNOS | =15.1x53-d31 | |
| Juniper JUNOS | =15.1x53-d32 | |
| Juniper JUNOS | =15.1x53-d33 | |
| Juniper JUNOS | =15.1x53-d60 | |
| Juniper Qfx10002 | ||
| Juniper Qfx5200 |
Remedy
In order to resolve this issue (remove the ONIE partition from the device), customer needs to reimage the device using the USB or PXE image from the Juniper download page. The affected Junos image files have been removed from the Juniper download page.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2018-0035?
CVE-2018-0035 is a vulnerability that affects QFX5200 and QFX10002 devices running Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33, or 15.1X53-D60, or have been upgraded to these releases using .bin or .iso images.
What is the severity of CVE-2018-0035?
The severity of CVE-2018-0035 is critical with a severity score of 9.8.
Which devices are affected by CVE-2018-0035?
QFX5200 and QFX10002 devices are affected by CVE-2018-0035.
Which Junos OS versions are affected by CVE-2018-0035?
Junos OS versions 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33, and 15.1X53-D60 are affected by CVE-2018-0035.
How can I fix CVE-2018-0035?
To fix CVE-2018-0035, upgrade your Junos OS to a version that is not vulnerable.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/author
- agent/title
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- vendor/juniper
- canonical/juniper junos
- version/juniper junos/15.1x53-d21
- version/juniper junos/15.1x53-d30
- version/juniper junos/15.1x53-d31
- version/juniper junos/15.1x53-d32
- version/juniper junos/15.1x53-d33
- version/juniper junos/15.1x53-d60
- canonical/juniper qfx10002
- canonical/juniper qfx5200