PT-2019-2078

CVE-2019-0041

·

Published

2019-04-10

·

Updated

2020-09-29

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R1-S2 Junos OS version 18.2R2
Description The issue is related to errors in security settings, allowing a remote attacker to impact the integrity and availability of protected information. On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface, potentially causing the device to fail to forward such traffic.
Recommendations For Junos OS versions prior to 18.2R1-S2, update to version 18.2R1-S2 or later. For Junos OS version 18.2R2, consider applying configuration changes to restrict access to the control plane via loopback interface until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾