CVE-2018-0009 describes a firewall bypass vulnerability affecting Juniper Networks SRX series devices running specific Junos OS versions. This flaw occurs when firewall rules configured with custom application UUIDs starting with zeros incorrectly match all TCP traffic, allowing traffic that should be blocked to pass through the device. The vulnerability has a CVSS v3.0 score of 5.9 (MEDIUM), indicating it can be exploited remotely with high attack complexity to achieve a high impact on integrity, without requiring user interaction or privileges. Currently, there is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 12.1X46, < 12.1X46-D71CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
>= 12.3X48, < 12.3X48-D55CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
>= 15.1X49, < 15.1X49-D100CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
12.1x46CPE matchmatch criteria | cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:* | ||
12.1x46CPE matchmatch criteria | cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.