Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-0001

34
FAUCET Score

CVE-2018-0001 describes a critical use-after-free vulnerability in older versions of Juniper Networks Junos OS. This flaw allows an unauthenticated, remote attacker to execute arbitrary code by injecting crafted data into specific PHP URLs within the J-Web process. The vulnerability carries a CVSS score of 9.8 (CRITICAL), indicating a network-based attack with low complexity, requiring no user interaction or privileges, and leading to complete compromise of confidentiality, integrity, and availability. While the EPSS score is low, suggesting limited current exploitation, the FAUCET Risk Score is 94/100. There is no evidence of active exploitation (KEV list) or publicly available exploit code (Metasploit, Nuclei, ExploitDB). Community discussion is minimal, and there is no media coverage, which is typical for the majority of CVEs.

Impacted Technologies

VendorProductVersion(s)CPE
12.1x46CPE matchmatch criteria
cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*
12.1x46CPE matchmatch criteria
cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*
12.1x46CPE matchmatch criteria
cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*
12.1x46CPE matchmatch criteria
cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*
12.1x46CPE matchmatch criteria
cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
6.33%
Probability of exploitation in next 30 days
EPSS Percentile
92.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0634 is in the 88th percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

juniperpatch availablevia nvd_reference
View patch

References

kb.juniper.net / JSA10828
MitigationPatchVendor Advisory
securityfocus.com / bid/103092
securitytracker.com / id/1040180
Third Party AdvisoryVDB Entry