CVE-2019-0015

🗓️ 15 Jan 2019 21:29:01Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

A vulnerability in SRX Series Service Gateway allows deleted dynamic VPN users to establish connections until device reboot

Reporter	Title	Published	Views	Family All 6
BDU FSTEC	The vulnerability of the Junos OS, related to errors in the token caching mechanisms of dynamic VPN connections, allows a hacker to gain access to the device.	21 Feb 201900:00	–	bdu_fstec
CVE	CVE-2019-0015	15 Jan 201921:00	–	cve
Cvelist	CVE-2019-0015 Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot	15 Jan 201921:00	–	cvelist
EUVD	EUVD-2019-0822	7 Oct 202500:30	–	euvd
Tenable Nessus	Junos OS: Deleted dynamic VPN users are allowed to establish VPN connections until reboot (JSA10915)	7 Feb 201900:00	–	nessus
Prion	Authentication flaw	15 Jan 201921:29	–	prion

NVD

Node

juniper junosMatch12.3x48-

OR

juniper junosMatch12.3x48d10

OR

juniper junosMatch12.3x48d100

OR

juniper junosMatch12.3x48d15

OR

juniper junosMatch12.3x48d20

OR

juniper junosMatch12.3x48d25

OR

juniper junosMatch12.3x48d30

OR

juniper junosMatch12.3x48d35

OR

juniper junosMatch12.3x48d40

OR

juniper junosMatch12.3x48d45

OR

juniper junosMatch12.3x48d50

OR

juniper junosMatch12.3x48d51

OR

juniper junosMatch12.3x48d55

OR

juniper junosMatch12.3x48d60

OR

juniper junosMatch12.3x48d65

OR

juniper junosMatch12.3x48d66

OR

juniper junosMatch12.3x48d70

OR

juniper junosMatch15.1x49-

OR

juniper junosMatch15.1x49d10

OR

juniper junosMatch15.1x49d100

OR

juniper junosMatch15.1x49d110

OR

juniper junosMatch15.1x49d120

OR

juniper junosMatch15.1x49d130

OR

juniper junosMatch15.1x49d131

OR

juniper junosMatch15.1x49d140

OR

juniper junosMatch15.1x49d15

OR

juniper junosMatch15.1x49d20

OR

juniper junosMatch15.1x49d25

OR

juniper junosMatch15.1x49d30

OR

juniper junosMatch15.1x49d35

OR

juniper junosMatch15.1x49d40

OR

juniper junosMatch15.1x49d45

OR

juniper junosMatch15.1x49d50

OR

juniper junosMatch15.1x49d55

OR

juniper junosMatch15.1x49d60

OR

juniper junosMatch15.1x49d65

OR

juniper junosMatch15.1x49d70

OR

juniper junosMatch15.1x49d75

OR

juniper junosMatch15.1x49d80

OR

juniper junosMatch15.1x49d90

OR

juniper junosMatch17.3-

OR

juniper junosMatch17.3r1

OR

juniper junosMatch17.3r1-s1

OR

juniper junosMatch17.3r1-s4

OR

juniper junosMatch17.3r2

OR

juniper junosMatch17.3r2-s1

OR

juniper junosMatch17.3r2-s2

OR

juniper junosMatch17.3r2-s3

OR

juniper junosMatch17.3r2-s4

OR

juniper junosMatch17.3r2-s5

OR

juniper junosMatch17.4-

OR

juniper junosMatch17.4r1

OR

juniper junosMatch17.4r1-s1

OR

juniper junosMatch17.4r1-s2

OR

juniper junosMatch17.4r1-s3

OR

juniper junosMatch17.4r1-s4

OR

juniper junosMatch17.4r1-s5

OR

juniper junosMatch17.4r1-s6

OR

juniper junosMatch17.4r1-s7

OR

juniper junosMatch18.1-

OR

juniper junosMatch18.1r

OR

juniper junosMatch18.1r1

OR

juniper junosMatch18.1r2

OR

juniper junosMatch18.1r2-s1

OR

juniper junosMatch18.1r2-s2

OR

juniper junosMatch18.1r2-s4

OR

juniper junosMatch18.2-

OR

juniper junosMatch18.2r

OR

juniper junosMatch18.2r1

OR

juniper junosMatch18.2r1-

OR

juniper junosMatch18.2r1-s2

OR

juniper junosMatch18.2r1-s3

OR

juniper junosMatch18.2r1-s4

OR

juniper junosMatch18.2r1-s5

AND

juniper srx100Match-

OR

juniper srx110Match-

OR

juniper srx1400Match-

OR

juniper srx1500Match-

OR

juniper srx210Match-

OR

juniper srx220Match-

OR

juniper srx240Match-

OR

juniper srx300Match-

OR

juniper srx320Match-

OR

juniper srx340Match-

OR

juniper srx3400Match-

OR

juniper srx345Match-

OR

juniper srx3600Match-

OR

juniper srx380Match-

OR

juniper srx4000Match-

OR

juniper srx4100Match-

OR

juniper srx5400Match-

OR

juniper srx550Match-

OR

juniper srx5600Match-

OR

juniper srx5800Match-

OR

juniper srx650Match-

Source	Link
securityfocus	www.securityfocus.com/bid/106668
kb	www.kb.juniper.net/JSA10915

21 Nov 2024 04:16Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.4

CVSS 25.5

CVSS 35.4

EPSS0.00812

srx series service gateway dynamic vpn vulnerability authentication token caching junos os reboot