CVE-2019-0074

🗓️ 09 Oct 2019 20:15:18Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series with Next-Generation Routing Engine (NG-RE) allows a local authenticated user to read sensitive system files

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability of Junos OS routers from the NFX150, EX9200 series, with NG-RE, MX with NG-RE, PTX with NG-RE, and QFX10K with NG-RE families, arises due to incorrect restrictions on path names to restricted access directories. This allows attackers to gain unauthorized access to protected information.	22 Dec 201900:00	–	bdu_fstec
CVE	CVE-2019-0074	9 Oct 201919:26	–	cve
Cvelist	CVE-2019-0074 Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.	9 Oct 201919:26	–	cvelist
EUVD	EUVD-2019-0881	7 Oct 202500:30	–	euvd
Tenable Nessus	Juniper JSA10975	28 Oct 201900:00	–	nessus
OSV	CVE-2019-0074	9 Oct 201920:15	–	osv
Prion	Path traversal	9 Oct 201920:15	–	prion
Symantec	Juniper Junos CVE-2019-0074 Local Directory Traversal Vulnerability	9 Oct 201900:00	–	symantec

NVD

Node

juniper junosMatch15.1f1

OR

juniper junosMatch15.1f2

OR

juniper junosMatch15.1f2-s1

OR

juniper junosMatch15.1f2-s2

OR

juniper junosMatch15.1f2-s3

OR

juniper junosMatch15.1f2-s4

OR

juniper junosMatch15.1f3

OR

juniper junosMatch15.1f4

OR

juniper junosMatch15.1f5

OR

juniper junosMatch15.1f6

OR

juniper junosMatch15.1f6-s3

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch16.1r6

OR

juniper junosMatch16.1r6-s1

OR

juniper junosMatch16.1r7

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch17.1-

OR

juniper junosMatch17.1r1

OR

juniper junosMatch17.1r2-s1

OR

juniper junosMatch17.1r2-s10

OR

juniper junosMatch17.1r2-s2

OR

juniper junosMatch17.1r2-s3

OR

juniper junosMatch17.1r2-s4

OR

juniper junosMatch17.1r2-s5

OR

juniper junosMatch17.1r2-s6

OR

juniper junosMatch17.1r2-s7

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch17.2-

OR

juniper junosMatch17.2r1-s2

OR

juniper junosMatch17.2r1-s4

OR

juniper junosMatch17.2r1-s7

OR

juniper junosMatch17.2r1-s8

OR

juniper junosMatch17.2r2-s6

OR

juniper junosMatch17.2r2-s7

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch17.3r1-s1

OR

juniper junosMatch17.3r2

OR

juniper junosMatch17.3r2-s1

OR

juniper junosMatch17.3r2-s2

OR

juniper junosMatch17.3r3

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch17.4r1

OR

juniper junosMatch17.4r1-s1

OR

juniper junosMatch17.4r1-s2

OR

juniper junosMatch17.4r1-s4

OR

juniper junosMatch17.4r1-s7

OR

juniper junosMatch17.4r2

OR

juniper junosMatch17.4r2-s1

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch18.1-

OR

juniper junosMatch18.1r2

OR

juniper junosMatch18.1r2-s1

OR

juniper junosMatch18.1r2-s2

OR

juniper junosMatch18.1r3

OR

juniper junosMatch18.1r3-s2

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch18.2-

OR

juniper junosMatch18.2r1-s5

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch18.2x75-

OR

juniper junosMatch18.2x75d20

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch18.3-

OR

juniper junosMatch18.3r1

OR

juniper junosMatch18.3r1-s1

OR

juniper junosMatch18.3r1-s3

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Node

juniper junosMatch18.4-

OR

juniper junosMatch18.4r1

OR

juniper junosMatch18.4r1-s2

AND

juniper ex9200Match-

OR

juniper nfx150Match-

OR

juniper qfx10002Match-

OR

juniper qfx10008Match-

OR

juniper qfx10016Match-

Source	Link
kb	www.kb.juniper.net/JSA10975

21 Nov 2024 04:16Current

5.3Medium risk

Vulners AI Score5.3

CVSS 22.1

CVSS 3.15.5

EPSS0.00041

nfx150 series qfx10k series ex9200 series mx series ptx series next-generation routing engine ng-re juniper networks junos os path traversal vulnerability sensitive system files