CVE-2019-0007: Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability

Severity: critical (CVSS 10.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-01-15 · updated 2026-06-17
Weakness: CWE-330

Description

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F5 on vMX Series.

Affected products

Juniper Junos OS: 15.1, 15.1-f1, 15.1-f2, 15.1-f3, 15.1-f4, 15.1-f5

References

http://www.securityfocus.com/bid/106564
https://kb.juniper.net/JSA10903
http://www.securityfocus.com/bid/106564
https://kb.juniper.net/JSA10903

Get alerted when CVE-2019-0007 or the next vulnerability affects your stack