CVE-2018-0052

CVE-2018-0052 describes a critical vulnerability in Juniper Networks Junos OS that allows unauthenticated remote root access. This flaw affects various Juniper products including SRX, EX, QFX, and NFX series devices running specific Junos OS versions. The vulnerability arises if the RSH service is enabled and PAM authentication is disabled, a configuration achievable by a privileged user using an undocumented CLI command. With a CVSS score of 8.1 (HIGH), this vulnerability has a network attack vector, high impact on confidentiality, integrity, and availability, and requires high attack complexity due to the prerequisite configuration. An attacker could gain complete control over the affected device without authentication. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE. It is not listed in the CISA KEV catalog, suggesting it is not widely exploited in the wild.