CVE-2018-0035: Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images
QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been upgraded to these releases using the .bin or .iso images may contain an unintended additional Open Network Install Environment (ONIE) partition. This additional partition allows the superuser to reboot to the ONIE partition which will wipe out the content of the Junos partition and its configuration. Once rebooted, the ONIE partition will not have root password configured, thus any user can access the console or SSH, using an IP address acquired from DHCP, as root without password. Once the device has been shipped or upgraded with the ONIE partition installed, the issue will persist. Simply upgrading to higher release via the CLI will not resolve the issue. No other Juniper Networks products or platforms are affected by this issue.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2018-0035?
CVE-2018-0035 is a vulnerability that affects QFX5200 and QFX10002 devices running Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33, or 15.1X53-D60, or have been upgraded to these releases using .bin or .iso images.
What is the severity of CVE-2018-0035?
The severity of CVE-2018-0035 is critical with a severity score of 9.8.
Which devices are affected by CVE-2018-0035?
QFX5200 and QFX10002 devices are affected by CVE-2018-0035.
Which Junos OS versions are affected by CVE-2018-0035?
Junos OS versions 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33, and 15.1X53-D60 are affected by CVE-2018-0035.
How can I fix CVE-2018-0035?
To fix CVE-2018-0035, upgrade your Junos OS to a version that is not vulnerable.