This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2019-0054 | BDVDB-2026-124013 Detail

Juniper NetworksJunos OS

Description#

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-295 Improper Certificate Validation
  • CWE-300 Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.