What’s Vulnerable › Vulnerabilities

CVE-2019-0054: Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-09 · updated 2026-06-17
• Weakness: CWE-295

Description

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.

Affected products

• Juniper Junos OS: 15.1x49, 15.1x49-d10, 15.1x49-d100, 15.1x49-d110, 15.1x49-d20, 15.1x49-d30 (+11)

References

• https://kb.juniper.net/JSA10952
• https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html
• https://kb.juniper.net/JSA10952
• https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html

Get alerted when CVE-2019-0054 or the next vulnerability affects your stack