How does CVE-2019-0057 impact Juniper Networks Junos OS?

CVE-2019-0057 allows a local authenticated attacker to bypass regular security controls and access the Junos Device Manager (JDM) application to take control of the system.

Which versions of Juniper Networks Junos OS are affected by CVE-2019-0057?

Juniper Networks Junos OS versions prior to 18.2R1, 18.2X, 18.2x75 are affected by CVE-2019-0057.

What is the severity of CVE-2019-0057?

CVE-2019-0057 has a severity rating of 7.8 (high).

How can I fix CVE-2019-0057?

To fix CVE-2019-0057, it is recommended to update to Juniper Networks Junos OS version 18.2R1, 18.2X, or 18.2x75.

Vulnerability/
CVE-2019-0057

high

7.8

9/10/2019

17/9/2024

CVE-2019-0057: NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.

Q: What is CVE-2019-0057?

CVE-2019-0057 is an improper authorization weakness in Juniper Networks Junos OS.

First published: Wed Oct 09 2019(Updated: )

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager (JDM) application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5.

Credit: sirt@juniper.net

Affected Software	Affected Version	How to fix
Juniper JUNOS	<=18.1
Juniper JUNOS	=18.2
Juniper JUNOS	=18.2x75
Juniper Nfx150
Juniper Nfx250

Remedy

The following software releases have been updated to resolve this specific issue: 18.2R1, 18.2X75-D5, and all subsequent releases.

Never miss a vulnerability like this again

Reference Links

https://kb.juniper.net/JSA10955

Frequently Asked Questions

What is CVE-2019-0057?
CVE-2019-0057 is an improper authorization weakness in Juniper Networks Junos OS.
How does CVE-2019-0057 impact Juniper Networks Junos OS?
CVE-2019-0057 allows a local authenticated attacker to bypass regular security controls and access the Junos Device Manager (JDM) application to take control of the system.
Which versions of Juniper Networks Junos OS are affected by CVE-2019-0057?
Juniper Networks Junos OS versions prior to 18.2R1, 18.2X, 18.2x75 are affected by CVE-2019-0057.
What is the severity of CVE-2019-0057?
CVE-2019-0057 has a severity rating of 7.8 (high).
How can I fix CVE-2019-0057?
To fix CVE-2019-0057, it is recommended to update to Juniper Networks Junos OS version 18.2R1, 18.2X, or 18.2x75.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/references
agent/remedy
agent/severity
agent/author
agent/title
agent/last-modified-date
agent/tags
agent/description
agent/first-publish-date
agent/event
vendor/juniper
canonical/juniper junos
version/juniper junos/18.1
version/juniper junos/18.2
version/juniper junos/18.2x75
canonical/juniper nfx150
canonical/juniper nfx250

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.