← Back

CVE-2019-0007

nvd nist
Published: Jan 15, 2019Modified: Jun 17, 2026

JSON object

Loading...
10.0
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 6.0
Source: NVD

Description

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F5 on vMX Series.

Affected (6)

Products: Juniper: Junos
1 product
Junos
Configuration A
6 vulnerable · 16 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1
Version 15.1 f1
Version 15.1 f2
Version 15.1 f3
Version 15.1 f4
Version 15.1 f5
Running on/withPlatform Versions
Juniper
Mx10
All versions
Juniper
Mx10003
All versions
Juniper
Mx10008
All versions
Juniper
Mx104
All versions
Juniper
Mx150
All versions
Juniper
Mx2008
All versions
Juniper
Mx2010
All versions
Juniper
Mx2020
All versions
Juniper
Mx204
All versions
Juniper
Mx240
All versions
Juniper
Mx40
All versions
Juniper
Mx480
All versions
Juniper
Mx5
All versions
Juniper
Mx80
All versions
Juniper
Mx960
All versions
Juniper
Vmx
All versions

References (4)

Source: sirt@juniper.net
Third Party AdvisoryVDB Entry
Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.