CVE-2018-0024

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.1X46-D45 on SRX Series Juniper Networks Junos OS versions prior to 12.3X48-D20 on SRX Series Juniper Networks Junos OS versions prior to 12.3R11 on EX Series Juniper Networks Junos OS versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100 Juniper Networks Junos OS versions prior to 15.1X49-D20 on SRX Series

Description: An Improper Privilege Management issue in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system.

Recommendations: For versions prior to 12.1X46-D45 on SRX Series, update to 12.1X46-D45 or later. For versions prior to 12.3X48-D20 on SRX Series, update to 12.3X48-D20 or later. For versions prior to 12.3R11 on EX Series, update to 12.3R11 or later. For versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100, update to 14.1X53-D30 or later. For versions prior to 15.1X49-D20 on SRX Series, update to 15.1X49-D20 or later.