CVE-2019-0007

{"id": "CVE-2019-0007", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "sirt@juniper.net", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 3.9}]}, "published": "2019-01-15T21:29:01.087", "references": [{"url": "http://www.securityfocus.com/bid/106564", "tags": ["Third Party Advisory", "VDB Entry"], "source": "sirt@juniper.net"}, {"url": "https://kb.juniper.net/JSA10903", "tags": ["Vendor Advisory"], "source": "sirt@juniper.net"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-330"}]}], "descriptions": [{"lang": "en", "value": "The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F5 on vMX Series."}, {"lang": "es", "value": "El software de la serie vMX emplea un n\u00famero de secuencia IP ID predecible. Esto deja el sistema y a los clientes que se conectan a trav\u00e9s del dispositivo vulnerables a una familia de ataques que depende del uso de n\u00fameros de secuencia IP ID como su m\u00e9todo de ataque b\u00e1sico. Se encontr\u00f3 el problema durante un an\u00e1lisis de seguridad interno del producto. Las versiones afectadas son Juniper Networks Junos OS: versiones 15.1 anteriores a la 15.1F5 en la serie NFX."}], "lastModified": "2020-08-24T17:37:01.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"}, {"criteria": "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"}, {"criteria": "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"}, {"criteria": "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E0ECBD8-3D66-49DA-A557-5695159F0C06"}, {"criteria": "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EAA2998-A0D6-4818-9E7C-25E8099403E7"}, {"criteria": "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "52699E2B-450A-431C-81E3-DC4483C8B4F2"}, {"criteria": "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"}, {"criteria": "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"}, {"criteria": "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F72C850A-0530-4DB7-A553-7E19F82122B5"}, {"criteria": "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7FE2089C-F341-4DC1-B76D-633BC699306D"}, {"criteria": "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"}, {"criteria": "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "27175D9A-CA2C-4218-8042-835E25DFCA43"}, {"criteria": "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"}, {"criteria": "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2754C2DF-DF6E-4109-9463-38B4E0465B77"}, {"criteria": "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"}, {"criteria": "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"}, {"criteria": "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "104858BD-D31D-40E0-8524-2EC311F10EAC"}, {"criteria": "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3B557965-0040-4048-B56C-F564FF28635B"}, {"criteria": "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EB875EBD-A3CD-4466-B2A3-39D47FF94592"}, {"criteria": "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"}, {"criteria": "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7C4940BB-3715-4FAD-89FE-D876F957A098"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "sirt@juniper.net"}