CVE-2019-0035

CVE-2019-0035 describes a vulnerability in Juniper Junos OS where, despite "set system ports console insecure" being enabled to disallow root login, an attacker with physical access to the console can change the root password on systems booted from an OAM volume. This bypasses security measures and allows for administrative access. The vulnerability affects various Junos OS versions prior to specific patched releases, starting from Junos OS 15.1. The vulnerability has a CVSS v3.1 score of 6.8 (Medium), indicating a physical attack vector (AV:P) with low attack complexity (AC:L) and no user interaction required (UI:N). A successful exploit grants high confidentiality, integrity, and availability impact (C:H/I:H/A:H) due to the ability to gain root access. There is currently no evidence of active exploitation, nor are there known public exploits available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.