CVE-2019-0002

Description

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action policer in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. This issue affect both IPv4 and IPv6 firewall filter.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.273

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2019-0002 are fixed in junos 15.1x53-d590NCM
Multiple Vulnerabilities are fixed in junos 18.1R3NCM
Multiple Vulnerabilities are fixed in junos 18.2r2NCM
Incomplete Filtering of Multiple Instances of Special Elements Vulnerability (CVE-2019-0002)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234