CVE-2019-0058 — Networks Junos OS vulnerability

3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 88.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Juniper Networks Junos OSJuniper JunosJuniper Junos OS+1 more
Timeline
PublishedOct 9
Latest updateMay 24

Description

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D80 on SRX Series.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5juniper_networks/junos_os12.3X48 — 12.3X48-D80
▶NVDjuniper/junos12.3x48

🔴Vulnerability Details

1
GHSA
GHSA-77jc-hjx4-qm2r: A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system↗2022-05-24
▶

📋Vendor Advisories

1
Juniper
CVE-2019-0058: A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated↗2019-10-09
▶
CVE-2019-0058 — Juniper Networks Junos OS vulnerability | cvebase