Critical severity · published Jan 15, 2019
CVE-2019-0002
Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect
9.8
CVSS
2.4%
EPSS
No
On KEV
Description
On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. This issue affect both IPv4 and IPv6 firewall filter.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JO
Junos OS · Juniper
15.1X53 before 15.1X53-D590; 18.1 before 18.1R3; 18.2 before 18.2R2 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-0002
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-0002
Third Party Advisory
http://www.securityfocus.com/bid/106669
Vendor Advisory
https://kb.juniper.net/JSA10901
Vendor Advisory
https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-pfe-filter.html
More from Junos OS
9.8
CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
9.8
CVE-2020-1631
Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
5.3
CVE-2023-36851
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
5.3
CVE-2023-36846
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files