Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-0024 Details

Description

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 12.3 versions prior to 12.3R11 on EX Series; 14.1X53 versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100;; 15.1X49 versions prior to 15.1X49-D20 on SRX Series.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://kb.juniper.net/JSA10857	CVE	MitigationVendor Advisory
http://www.securityfocus.com/bid/104718	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041314	CVE	Third Party AdvisoryVDB Entry
https://kb.juniper.net/JSA10857	[email protected]	MitigationVendor Advisory
http://www.securityfocus.com/bid/104718	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041314	[email protected]	Third Party AdvisoryVDB Entry

see all 6 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-269	Improper Privilege Management	[email protected]

Affected Products

Product	Versions
juniper junos	12.1x46 12.1x46 d10 12.1x46 d15 12.1x46 d20 12.1x46 d25
CPE cpe:2.3:o:juniper:junos:12.1x46:::::::* cpe:2.3:o:juniper:junos:12.1x46:d10:::::: cpe:2.3:o:juniper:junos:12.1x46:d15:::::: cpe:2.3:o:juniper:junos:12.1x46:d20:::::: cpe:2.3:o:juniper:junos:12.1x46:d25:::::: cpe:2.3:o:juniper:junos:12.1x46:d30:::::: cpe:2.3:o:juniper:junos:12.1x46:d35:::::: cpe:2.3:o:juniper:junos:12.1x46:d40:::::: cpe:2.3:o:juniper:junos:12.3x48:::::::* cpe:2.3:o:juniper:junos:12.3x48:d10:::::: cpe:2.3:o:juniper:junos:12.3x48:d15:::::: cpe:2.3:o:juniper:junos:12.3:::::::* cpe:2.3:o:juniper:junos:12.3:r1:::::: cpe:2.3:o:juniper:junos:12.3:r10:::::: cpe:2.3:o:juniper:junos:12.3:r2:::::: cpe:2.3:o:juniper:junos:12.3:r3:::::: cpe:2.3:o:juniper:junos:12.3:r4:::::: cpe:2.3:o:juniper:junos:12.3:r5:::::: cpe:2.3:o:juniper:junos:12.3:r6:::::: cpe:2.3:o:juniper:junos:12.3:r7:::::: cpe:2.3:o:juniper:junos:12.3:r8:::::: cpe:2.3:o:juniper:junos:12.3:r9:::::: cpe:2.3:o:juniper:junos:14.1x53:::::::* cpe:2.3:o:juniper:junos:14.1x53:d10:::::: cpe:2.3:o:juniper:junos:14.1x53:d15:::::: cpe:2.3:o:juniper:junos:14.1x53:d16:::::: cpe:2.3:o:juniper:junos:14.1x53:d25:::::: cpe:2.3:o:juniper:junos:14.1x53:d26:::::: cpe:2.3:o:juniper:junos:14.1x53:d27:::::: cpe:2.3:o:juniper:junos:15.1x49:::::::* cpe:2.3:o:juniper:junos:15.1x49:d10:::::: Remediation No remediation found in references.
juniper srx100	All versions
CPE cpe:2.3:h:juniper:srx100:-:::::::* Remediation No remediation found in references.
juniper srx110	All versions
CPE cpe:2.3:h:juniper:srx110:-:::::::* Remediation No remediation found in references.
juniper srx1400	All versions
CPE cpe:2.3:h:juniper:srx1400:-:::::::* Remediation No remediation found in references.
juniper srx1500	All versions
CPE cpe:2.3:h:juniper:srx1500:-:::::::* Remediation No remediation found in references.
juniper srx210	All versions
CPE cpe:2.3:h:juniper:srx210:-:::::::* Remediation No remediation found in references.
juniper srx220	All versions
CPE cpe:2.3:h:juniper:srx220:-:::::::* Remediation No remediation found in references.
juniper srx240	All versions
CPE cpe:2.3:h:juniper:srx240:-:::::::* Remediation No remediation found in references.
juniper srx300	All versions
CPE cpe:2.3:h:juniper:srx300:-:::::::* Remediation No remediation found in references.
juniper srx320	All versions
CPE cpe:2.3:h:juniper:srx320:-:::::::* Remediation No remediation found in references.
juniper srx340	All versions
CPE cpe:2.3:h:juniper:srx340:-:::::::* Remediation No remediation found in references.
juniper srx3400	All versions
CPE cpe:2.3:h:juniper:srx3400:-:::::::* Remediation No remediation found in references.
juniper srx345	All versions
CPE cpe:2.3:h:juniper:srx345:-:::::::* Remediation No remediation found in references.
juniper srx3600	All versions
CPE cpe:2.3:h:juniper:srx3600:-:::::::* Remediation No remediation found in references.
juniper srx4100	All versions
CPE cpe:2.3:h:juniper:srx4100:-:::::::* Remediation No remediation found in references.
juniper srx4200	All versions
CPE cpe:2.3:h:juniper:srx4200:-:::::::* Remediation No remediation found in references.
juniper srx5400	All versions
CPE cpe:2.3:h:juniper:srx5400:-:::::::* Remediation No remediation found in references.
juniper srx550	All versions
CPE cpe:2.3:h:juniper:srx550:-:::::::* Remediation No remediation found in references.
juniper srx5600	All versions
CPE cpe:2.3:h:juniper:srx5600:-:::::::* Remediation No remediation found in references.
juniper srx5800	All versions
CPE cpe:2.3:h:juniper:srx5800:-:::::::* Remediation No remediation found in references.
juniper srx650	All versions
CPE cpe:2.3:h:juniper:srx650:-:::::::* Remediation No remediation found in references.
juniper ex rps	All versions
CPE cpe:2.3:h:juniper:ex_rps:-:::::::* Remediation No remediation found in references.
juniper ex2200	All versions
CPE cpe:2.3:h:juniper:ex2200:-:::::::* Remediation No remediation found in references.
juniper ex2200-c	All versions
CPE cpe:2.3:h:juniper:ex2200-c:-:::::::* Remediation No remediation found in references.
juniper ex2300	All versions
CPE cpe:2.3:h:juniper:ex2300:-:::::::* Remediation No remediation found in references.
juniper ex2300-c	All versions
CPE cpe:2.3:h:juniper:ex2300-c:-:::::::* Remediation No remediation found in references.
juniper ex3300	All versions
CPE cpe:2.3:h:juniper:ex3300:-:::::::* Remediation No remediation found in references.
juniper ex3400	All versions
CPE cpe:2.3:h:juniper:ex3400:-:::::::* Remediation No remediation found in references.
juniper ex4200	All versions
CPE cpe:2.3:h:juniper:ex4200:-:::::::* Remediation No remediation found in references.
juniper ex4300	All versions
CPE cpe:2.3:h:juniper:ex4300:-:::::::* Remediation No remediation found in references.
juniper ex4550	All versions
CPE cpe:2.3:h:juniper:ex4550:-:::::::* Remediation No remediation found in references.
juniper ex4600	All versions
CPE cpe:2.3:h:juniper:ex4600:-:::::::* Remediation No remediation found in references.
juniper ex9200	All versions
CPE cpe:2.3:h:juniper:ex9200:-:::::::* Remediation No remediation found in references.
juniper ex2200/vc	All versions
CPE cpe:2.3:h:juniper:ex2200/vc:-:::::::* Remediation No remediation found in references.
juniper ex3200	All versions
CPE cpe:2.3:h:juniper:ex3200:-:::::::* Remediation No remediation found in references.
juniper ex3300/vc	All versions
CPE cpe:2.3:h:juniper:ex3300/vc:-:::::::* Remediation No remediation found in references.
juniper ex4550/vc	All versions
CPE cpe:2.3:h:juniper:ex4550/vc:-:::::::* Remediation No remediation found in references.
juniper ex6200	All versions
CPE cpe:2.3:h:juniper:ex6200:-:::::::* Remediation No remediation found in references.
juniper ex8200/vc (xre)	All versions
CPE cpe:2.3:h:juniper:ex8200/vc_(xre):-:::::::* Remediation No remediation found in references.
juniper qfx3500	All versions
CPE cpe:2.3:h:juniper:qfx3500:-:::::::* Remediation No remediation found in references.
juniper qfx3600	All versions
CPE cpe:2.3:h:juniper:qfx3600:-:::::::* Remediation No remediation found in references.
juniper qfx5100	All versions
CPE cpe:2.3:h:juniper:qfx5100:-:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 9, 2019	CVE Modified	[email protected]
Oct 3, 2019	CWE Remap	[email protected]
Sep 11, 2018	Initial Analysis	[email protected]
Jul 28, 2018	CVE Modified	[email protected]
Jul 14, 2018	CVE Modified	[email protected]

CVE-2018-0024 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation