CVE Feed

    Dashboard / CVE / CVE-2019-0041

    CVE-2019-0041

    On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface (lo0). The device may fail to forward such traffic. This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series. This issue does not affect any other EX series devices.

    Published:Apr 10, 2019
    Last Modified:Nov 21, 2024
    EPS:Apr 10, 2019
    EPSS Score:0.00277
    CVSS Score:8.6

    Affected Products

    Vendor
    Juniper
    Product
    Ex4300-mp
    Vendor
    Juniper
    Product
    Junos

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2024-21620 (CVSS 8.8) — An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J-Web…
    CVE-2024-21619 (CVSS 5.3) — A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Conta…
    CVE-2023-36851 (CVSS 5.3) — A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows…
    CVE-2023-36844 (CVSS 5.3) — A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows a…
    CVE-2023-36847 (CVSS 5.3) — A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows …
    CVE-2022-22226 (CVSS 6.5) — In VxLAN scenarios on EX4300-MP, EX4600, QFX5000 Series devices an Uncontrolled Memory Allocation vulnerabilit…
    CVE-2022-22221 (CVSS 7.8) — An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos…
    CVE-2021-31365 (CVSS 6.5) — An Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on EX2300, EX3400 and EX4300 S…
    CVE-2021-0289 (CVSS 6.5) — When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet (AE) interface unit…
    CVE-2021-0285 (CVSS 7.5) — An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 S…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High