Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0014


Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.


Published

2018-01-10T22:29:01.463

Last Modified

2024-11-21T03:37:21.593

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 4.3 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

6.5

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper screenos 6.3.0r1 Yes
Operating System juniper screenos 6.3.0r2 Yes
Operating System juniper screenos 6.3.0r3 Yes
Operating System juniper screenos 6.3.0r4 Yes
Operating System juniper screenos 6.3.0r5 Yes
Operating System juniper screenos 6.3.0r6 Yes
Operating System juniper screenos 6.3.0r7 Yes
Operating System juniper screenos 6.3.0r8 Yes
Operating System juniper screenos 6.3.0r9 Yes
Operating System juniper screenos 6.3.0r10 Yes
Operating System juniper screenos 6.3.0r11 Yes
Operating System juniper screenos 6.3.0r12 Yes
Operating System juniper screenos 6.3.0r13 Yes
Operating System juniper screenos 6.3.0r14 Yes
Operating System juniper screenos 6.3.0r15 Yes
Operating System juniper screenos 6.3.0r16 Yes
Operating System juniper screenos 6.3.0r17 Yes
Operating System juniper screenos 6.3.0r18 Yes
Operating System juniper screenos 6.3.0r19 Yes
Operating System juniper screenos 6.3.0r20 Yes
Operating System juniper screenos 6.3.0r21 Yes
Operating System juniper screenos 6.3.0r22 Yes
Operating System juniper screenos 6.3.0r23 Yes
Operating System juniper screenos 6.3.0r24 Yes
Operating System juniper screenos 6.3.0r25 Yes

References