CVE-2018-0062

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform J-Web operations. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D60 on SRX Series; 15.1 versions prior to 15.1R7; 15.1F6; 15.1X49 versions prior to 15.1X49-D120 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400 Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D470, 15.1X53-D495 on NFX Series; 16.1 versions prior to 16.1R6; 16.2 versions prior to 16.2R2-S6, 16.2R3; 17.1 versions prior to 17.1R2-S6, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R2. No other Juniper Networks products or platforms are affected by this issue.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Juniper Networks	Junos OS	>= 12.1X46, < 12.1X46-D77; >= 12.3X48, < 12.3X48-D60; >= 15.1X49, < 15.1X49-D120
Juniper Networks	Junos OS	15.1F6; >= 12.3, < 12.3R12-S10; >= 15.1, < 15.1R7; >= 16.1, < 16.1R6; >= 16.2, < 16.2R2-S6, 16.2R3; >= 17.1, < 17.1R2-S6, 17.1R3; >= 17.2, < 17.2R3; >= 17.3, < 17.3R2
Juniper Networks	Junos OS	>= 15.1X53, < 15.1X53-D59
Juniper Networks	Junos OS	>= 15.1X53, < 15.1X53-D67
Juniper Networks	Junos OS	>= 15.1X53, < 15.1X53-D234
Juniper Networks	Junos OS	>= 15.1X53, < 15.1X53-D470, 15.1X53-D495

References

http://www.securitytracker.com/id/1041860Third Party Advisory, VDB Entry
https://kb.juniper.net/JSA10897Vendor Advisory
http://www.securitytracker.com/id/1041860Third Party Advisory, VDB Entry
https://kb.juniper.net/JSA10897Vendor Advisory

Timeline

Published: Oct 10, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-00636.5A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to CVE-2018-00868.6A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker t CVE-2018-00875.6A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to the CVE-2018-00886.7A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software coul CVE-2018-00897.5A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS) could allow an unauthenticated, remote atta CVE-2018-00907.5A vulnerability in management interface access control list (ACL) configuration of Cisco NX-OS System Software could allow an unauthenticate CVE-2018-00916.1A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke CVE-2018-00927.1A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacke CVE-2018-00936.1A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker CVE-2018-00947.5A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a CVE-2018-00957.8A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Applian CVE-2018-00965.9A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote att