CVE-2018-0053

vSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.

Medium · published October 10, 2018

CVSS v3.0
6.8
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without authentication when the system is initially booted up. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D30 on vSRX.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00490 · 41.2th percentile
Published
2018-10-10T18:00Z
EPSS history
Timeline
  • 10 OCT 18:00Z
    vSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.
    cvelistv5