CVE-2019-0057 NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.

🗓️ 09 Oct 2019 19:26:17Reported by juniperType

An attacker can take control of JDM app and the entire system through an authorization weakness in Juniper Networks Junos O

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the Junos OS router series in connection with authentication process errors allows attackers to gain access to the Junos Device Manager application and exercise full control over the system.	16 Oct 201900:00	–	bdu_fstec
CNVD	Juniper Networks Junos OS License Issue Vulnerability (CNVD-2020-13540)	10 Oct 201900:00	–	cnvd
CVE	CVE-2019-0057	9 Oct 201919:26	–	cve
EUVD	EUVD-2019-0864	7 Oct 202500:30	–	euvd
Tenable Nessus	NFX Series: Authentication Bypass Vulnerability Juniper Device Manager (JDM) (JSA10955)	25 Oct 201900:00	–	nessus
Tenable Nessus	Juniper JSA10970	29 Jan 202000:00	–	nessus
NVD	CVE-2019-0057	9 Oct 201920:15	–	nvd
Prion	Authorization	9 Oct 201920:15	–	prion
Symantec	Juniper Junos CVE-2019-0057 Local Authorization Bypass Vulnerability	9 Oct 201900:00	–	symantec

[
  {
    "platforms": [
      "NFX Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "18.2R1, 18.2X75-D5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.juniper.net/JSA10955

09 Oct 2019 19:26Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

EPSS0.00039