CVE-2018-0012

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
Juniper NetworksJunos Space>= All, < 17.2R1

References

Timeline

Published
Jan 10, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-00136.5A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieveCVE-2018-00146.5Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or daCVE-2018-00157.5A malicious user with unrestricted access to the AppFormix application management platform may be able to access a Python debug console and CVE-2018-00167.5Receipt of a specially crafted Connectionless Network Protocol (CLNP) datagram destined to an interface of a Junos OS device may result in aCVE-2018-00176.5A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a cerCVE-2018-00185.9On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rulesCVE-2018-00195.9A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib2d) may allow a remote network based attacker to cause the mib2d process to crasCVE-2018-00207.5Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon (rpd) crash and restart. ReceipCVE-2018-00218.8If all 64 digits of the connectivity association name (CKN) key or all 32 digits of the connectivity association key (CAK) key are not confiCVE-2018-00227.5A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specifiCVE-2018-00235.5JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuraCVE-2018-00247.8An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker
CVE-2018-0012: High severity, CVSS 7.8 | Vulnix