CVE-2018-0001: Junos: Unauthenticated Remote Code Execution through J-Web interface

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-10 · updated 2026-06-17
Weakness: CWE-416

Description

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D67; 12.3 versions prior to 12.3R12-S5; 12.3X48 versions prior to 12.3X48-D35; 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D44, 14.1X53-D50; 14.2 versions prior to 14.2R7-S7, 14.2R8; 15.1 versions prior to 15.1R3; 15.1X49 versions prior to 15.1X49-D30; 15.1X53 versions prior to 15.1X53-D70.

Affected products

Juniper Junos OS: 12.1x46-d10, 12.1x46-d15, 12.1x46-d20, 12.1x46-d25, 12.1x46-d30, 12.1x46-d35 (+61)

References

Get alerted when CVE-2018-0001 or the next vulnerability affects your stack