CVE-2019-0061
published 2019-10-09CVE-2019-0061: The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.36%
28.2th percentile
The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a local, authenticated user may be able to exploit this vulnerability to gain administrative privileges. This issue only affects Linux-based platforms. FreeBSD-based platforms are unaffected by this vulnerability. Exploitation of this vulnerability requires Junos shell access. This issue cannot be exploited from the Junos CLI. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D496, 15.1X53-D69; 16.1 versions prior to 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R1-S7, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos_os | — | — |
| juniper_networks | junos_os | >= 15.1X49 < 15.1X49-D171, 15.1X49-D180 | 15.1X49-D171, 15.1X49-D180 |
| juniper_networks | junos_os | >= 15.1X53 < 15.1X53-D496, 15.1X53-D69 | 15.1X53-D496, 15.1X53-D69 |
| juniper_networks | junos_os | >= 16.1 < 16.1R7-S4 | 16.1R7-S4 |
| juniper_networks | junos_os | >= 16.2 < 16.2R2-S9 | 16.2R2-S9 |
| juniper_networks | junos_os | >= 17.1 < 17.1R3 | 17.1R3 |
| juniper_networks | junos_os | >= 17.2 < 17.2R1-S8, 17.2R2-S7, 17.2R3-S1 | 17.2R1-S8, 17.2R2-S7, 17.2R3-S1 |
| juniper_networks | junos_os | >= 17.3 < 17.3R3-S4 | 17.3R3-S4 |
| juniper_networks | junos_os | >= 17.4 < 17.4R1-S6, 17.4R1-S7, 17.4R2-S3, 17.4R3 | 17.4R1-S6, 17.4R1-S7, 17.4R2-S3, 17.4R3 |
| juniper_networks | junos_os | >= 18.1 < 18.1R2-S4, 18.1R3-S4 | 18.1R2-S4, 18.1R3-S4 |
| juniper_networks | junos_os | >= 18.2 < 18.2R1-S5, 18.2R2-S2, 18.2R3 | 18.2R1-S5, 18.2R2-S2, 18.2R3 |
| juniper_networks | junos_os | >= 18.3 < 18.3R1-S3, 18.3R2 | 18.3R1-S3, 18.3R2 |
| juniper_networks | junos_os | >= 18.4 < 18.4R1-S2, 18.4R2 | 18.4R1-S2, 18.4R2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Juniper
CVE-2019-0061: The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an in
vendor_juniper·2019-10-09·CVSS 7.8
CVE-2019-0061 [HIGH] CWE-657 CVE-2019-0061: The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an in
CVE-2019-0061: The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a local, authenticated user may be able to exploit this vulnerability to gain administrative privileges. This issue only affects Linux-based platforms. FreeBSD-based platforms are unaffected by this vulnerability. Exploitation of this vulnerability requires Junos shell access. This issue cannot be exploited from the Junos CLI. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D496, 15.1X53-D69; 16.1 ve
GHSA
GHSA-6744-3fcf-cc9q: The management daemon (MGD) is responsible for all configuration and management operations in Junos OS
ghsa_unreviewed·2022-05-24
CVE-2019-0061 [HIGH] GHSA-6744-3fcf-cc9q: The management daemon (MGD) is responsible for all configuration and management operations in Junos OS
The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a local, authenticated user may be able to exploit this vulnerability to gain administrative privileges. This issue only affects Linux-based platforms. FreeBSD-based platforms are unaffected by this vulnerability. Exploitation of this vulnerability requires Junos shell access. This issue cannot be exploited from the Junos CLI. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D496, 15.1X53-D69; 16.1 versions prior to
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-10-09
Published