← Back

CVE-2019-0070

nvd nist
Published: Oct 9, 2019Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.0 / Impact: 6.0
Source: NVD

Description

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to take control of the entire system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1 on NFX Series.

Affected (2)

Products: Juniper: Junos
1 product
Junos
Configuration A
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Juniper
Up to 18.1
Version 18.2
Running on/withPlatform Versions
Juniper
Nfx150
All versions
Juniper
Nfx250
All versions

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.