CVE-2018-0053: vSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.

Severity: medium (CVSS 6.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-10-10 · updated 2026-06-17
Weakness: CWE-287

Description

An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without authentication when the system is initially booted up. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D30 on vSRX.

Affected products

Juniper Junos OS: 15.1x49, 15.1x49-d10, 15.1x49-d20

References

http://www.securitytracker.com/id/1041854
https://kb.juniper.net/JSA10887
http://www.securitytracker.com/id/1041854
https://kb.juniper.net/JSA10887

Get alerted when CVE-2018-0053 or the next vulnerability affects your stack