CVE-2019-0058 - CVE House

Back to Database

Status published High CVE-2019-0058

Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.

7.8 CVSS

Vulnerability Description

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D80 on SRX Series.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-0058

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://kb.juniper.net/JSA10956

More from Juniper Networks

View All →

Junos OS: SRX Series: J-Web can be exposed on additional interfaces

Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

Junos OS and Junos OS Evolved: Device allows login for user with expired password

Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection

Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash

Affected Vendor

Juniper Networks

View all reports →

Affected Software

Junos OS

Vulnerable Versions:

12.3X48

Timeline

Official Publish: October 9th, 2019

Last Modified: September 16th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.