CVE-2019-0054 (GCVE-0-2019-0054)

Vulnerability from cvelistv5 – Published: 2019-10-09 19:26 – Updated: 2024-09-17 00:36
VLAI
Title
Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.
Summary
An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.
Severity
6.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE
  • CWE-295 - Improper Certificate Validation
  • CWE-300 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
Assigner
References
Impacted products
Vendor Product Version CPE status
Juniper Networks Junos OS Affected: 15.1X49 , < 15.1X49-D120 (custom)
guessed Create a notification for this product.
Date Public
2019-10-09 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T17:37:07.223Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA10952"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "SRX Series"
          ],
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "15.1X49-D120",
              "status": "affected",
              "version": "15.1X49",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "The following minimum configuration is required:\n  services application-identification"
        }
      ],
      "datePublic": "2019-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-300",
              "description": "CWE-300 Channel Accessible by Non-Endpoint (\u0027Man-in-the-Middle\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-09T19:26:17.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://kb.juniper.net/JSA10952"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: 15.1X49-D120, and all subsequent releases."
        }
      ],
      "source": {
        "advisory": "JSA10952",
        "defect": [
          "1291665"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.",
      "workarounds": [
        {
          "lang": "en",
          "value": "Set the following command in the device for affected releases:\n\n  set services application-identification download secure-download"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.6"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2019-10-09T16:00:00.000Z",
          "ID": "CVE-2019-0054",
          "STATE": "PUBLIC",
          "TITLE": "Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates."
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "SRX Series",
                            "version_affected": "\u003c",
                            "version_name": "15.1X49",
                            "version_value": "15.1X49-D120"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "configuration": [
          {
            "lang": "en",
            "value": "The following minimum configuration is required:\n  services application-identification"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
          }
        ],
        "generator": {
          "engine": "Vulnogram 0.0.6"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-295 Improper Certificate Validation"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-300 Channel Accessible by Non-Endpoint (\u0027Man-in-the-Middle\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA10952",
              "refsource": "MISC",
              "url": "https://kb.juniper.net/JSA10952"
            },
            {
              "name": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html",
              "refsource": "MISC",
              "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "The following software releases have been updated to resolve this specific issue: 15.1X49-D120, and all subsequent releases."
          }
        ],
        "source": {
          "advisory": "JSA10952",
          "defect": [
            "1291665"
          ],
          "discovery": "INTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Set the following command in the device for affected releases:\n\n  set services application-identification download secure-download"
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2019-0054",
    "datePublished": "2019-10-09T19:26:17.333Z",
    "dateReserved": "2018-10-11T00:00:00.000Z",
    "dateUpdated": "2024-09-17T00:36:21.418Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2019-0054",
      "date": "2026-09-26",
      "epss": "0.00587",
      "percentile": "0.45863"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
                  "matchCriteriaId": "27A6BF09-ABBF-4126-ADD6-B174937F8554",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
                  "matchCriteriaId": "D90D8985-34EF-44CC-A9A7-CB0FD22676F2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
                  "matchCriteriaId": "856A5668-FA4F-44E9-A3F0-BE4979F631E2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
                  "matchCriteriaId": "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
                  "matchCriteriaId": "18468579-0195-4DDE-BAA5-4BE4068F3A69",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
                  "matchCriteriaId": "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
                  "matchCriteriaId": "870244F3-1C05-4F10-A205-5189BB860F46",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
                  "matchCriteriaId": "235EE40B-AA15-4F39-8087-A051F4F70995",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
                  "matchCriteriaId": "17330544-3AFC-463E-A146-2840A8AE17D2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
                  "matchCriteriaId": "8ABA301F-7866-42A5-8391-E07BEAFF06FA",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
                  "matchCriteriaId": "884E4A85-ED42-4391-9FDD-9052F957743A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
                  "matchCriteriaId": "1901864B-688B-4352-A587-4B96B4E49FB1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
                  "matchCriteriaId": "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
                  "matchCriteriaId": "1B6670FB-9F5A-469B-97F2-074C28572065",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
                  "matchCriteriaId": "71198992-83AA-4E28-BA7D-A3C1897B5E2B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
                  "matchCriteriaId": "4323D874-C317-4D76-8E2D-C82376D84CBE",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
                  "matchCriteriaId": "F56067DA-EBA9-481A-B60B-52148584EFBD",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "11D4A86D-BDB4-4A01-96FE-7E023C58074B",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8B10DFCE-5331-4D79-8D9F-EF84743493D3",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected."
        },
        {
          "lang": "es",
          "value": "Una debilidad de Comprobaci\u00f3n de Certificado Inapropiada en el cliente de actualizaci\u00f3n de firma de SRX Series Application Identification (app-id) de Juniper Networks Junos OS, permite a un atacante realizar ataques de tipo Man-in-the-Middle (MitM) que pueden comprometer la integridad y confidencialidad del dispositivo . Este problema afecta a: Juniper Networks Junos OS versiones 15.1X49 anteriores a 15.1X49-D120 en dispositivos de la Serie SRX. Ninguna otra versi\u00f3n del sistema operativo Junos est\u00e1 afectada."
        }
      ],
      "id": "CVE-2019-0054",
      "lastModified": "2024-11-21T04:16:08.800",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "NONE",
              "baseScore": 5.8,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
              "version": "2.0"
            },
            "exploitabilityScore": 8.6,
            "impactScore": 4.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.8,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            },
            "exploitabilityScore": 1.6,
            "impactScore": 5.2,
            "source": "sirt@juniper.net",
            "type": "Secondary"
          },
          {
            "cvssData": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            },
            "exploitabilityScore": 2.2,
            "impactScore": 5.2,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2019-10-09T20:15:16.347",
      "references": [
        {
          "source": "sirt@juniper.net",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://kb.juniper.net/JSA10952"
        },
        {
          "source": "sirt@juniper.net",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://kb.juniper.net/JSA10952"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"
        }
      ],
      "sourceIdentifier": "sirt@juniper.net",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-295"
            },
            {
              "lang": "en",
              "value": "CWE-300"
            }
          ],
          "source": "sirt@juniper.net",
          "type": "Secondary"
        },
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-295"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
                    "matchCriteriaId": "27A6BF09-ABBF-4126-ADD6-B174937F8554",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
                    "matchCriteriaId": "D90D8985-34EF-44CC-A9A7-CB0FD22676F2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
                    "matchCriteriaId": "856A5668-FA4F-44E9-A3F0-BE4979F631E2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
                    "matchCriteriaId": "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
                    "matchCriteriaId": "18468579-0195-4DDE-BAA5-4BE4068F3A69",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
                    "matchCriteriaId": "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
                    "matchCriteriaId": "870244F3-1C05-4F10-A205-5189BB860F46",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
                    "matchCriteriaId": "235EE40B-AA15-4F39-8087-A051F4F70995",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
                    "matchCriteriaId": "17330544-3AFC-463E-A146-2840A8AE17D2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
                    "matchCriteriaId": "8ABA301F-7866-42A5-8391-E07BEAFF06FA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
                    "matchCriteriaId": "884E4A85-ED42-4391-9FDD-9052F957743A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
                    "matchCriteriaId": "1901864B-688B-4352-A587-4B96B4E49FB1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
                    "matchCriteriaId": "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
                    "matchCriteriaId": "1B6670FB-9F5A-469B-97F2-074C28572065",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
                    "matchCriteriaId": "71198992-83AA-4E28-BA7D-A3C1897B5E2B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
                    "matchCriteriaId": "4323D874-C317-4D76-8E2D-C82376D84CBE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
                    "matchCriteriaId": "F56067DA-EBA9-481A-B60B-52148584EFBD",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "11D4A86D-BDB4-4A01-96FE-7E023C58074B",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8B10DFCE-5331-4D79-8D9F-EF84743493D3",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected."
          },
          {
            "lang": "es",
            "value": "Una debilidad de Comprobaci\u00f3n de Certificado Inapropiada en el cliente de actualizaci\u00f3n de firma de SRX Series Application Identification (app-id) de Juniper Networks Junos OS, permite a un atacante realizar ataques de tipo Man-in-the-Middle (MitM) que pueden comprometer la integridad y confidencialidad del dispositivo . Este problema afecta a: Juniper Networks Junos OS versiones 15.1X49 anteriores a 15.1X49-D120 en dispositivos de la Serie SRX. Ninguna otra versi\u00f3n del sistema operativo Junos est\u00e1 afectada."
          }
        ],
        "id": "CVE-2019-0054",
        "lastModified": "2024-11-21T04:16:08.800",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 5.8,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 4.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.6,
              "impactScore": 5.2,
              "source": "sirt@juniper.net",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.2,
              "impactScore": 5.2,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2019-10-09T20:15:16.347",
        "references": [
          {
            "source": "sirt@juniper.net",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.juniper.net/JSA10952"
          },
          {
            "source": "sirt@juniper.net",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.juniper.net/JSA10952"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"
          }
        ],
        "sourceIdentifier": "sirt@juniper.net",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-295"
              },
              {
                "lang": "en",
                "value": "CWE-300"
              }
            ],
            "source": "sirt@juniper.net",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-295"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.