Medium severity · published Jan 10, 2018
CVE-2018-0014
Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets
6.5
CVSS
0.6%
EPSS
No
On KEV
Description
Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Screenos · Juniper
6.3.0r1; 6.3.0r2; 6.3.0r3; 6.3.0r4; 6.3.0r5; 6.3.0r6; +19 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-0014
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-0014
Third Party Advisory
http://www.securitytracker.com/id/1040185
Vendor Advisory
https://kb.juniper.net/JSA10841
More from Screenos
9.8
CVE-2015-7755
Juniper ScreenOS Improper Authentication Vulnerability
8.1
CVE-2015-7754
Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted…
7.5
CVE-2016-1268
The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a crafted SSL packet
5.4
CVE-2017-2339
A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to…
5.4
CVE-2017-2338
A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to…