#VU18578 Improper control of interaction frequency in Juniper Junos OS - CVE-2019-0039


Vulnerability identifier: #VU18578

Vulnerability risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2019-0039

CWE-ID: CWE-799

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Juniper Junos OS
Operating systems & Components / Operating system

Vendor: Juniper Networks, Inc.

Description

The vulnerability allows a remote attacker to perform brute-force attack.

The vulnerability exists due to the high default connection limit of the REST API which does not implement sufficient measures to prevent multiple failed authentication attempts. A remote attacker can brute-force password using advanced scripting techniques.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Juniper Junos OS: 14.1X53-D15 - 14.1x53, 15.1R - 15.1, 16.1R - 16.1, 16.2R1-S1 - 16.2, 17.1R1-S1 - 17.1, 17.2R1-S1 - 17.2, 17.3R1-S1 - 17.3, 17.4R1-S1 - 17.4, 18.1R1 - 18.1, 18.2R1-S3 - 18.2, 18.3R1 - 18.3

External links
https://www.securityfocus.com/bid/107899
https://kb.juniper.net/JSA10928

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Improper control of interaction frequency in Juniper Junos OS