# Vulnerabilities published in 2018


- [CVE-2018-0060](https://insights.sbomify.com/CVE-2018-0060/): Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash (medium 5.3)
- [CVE-2018-0059](https://insights.sbomify.com/CVE-2018-0059/): ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability (medium 5.4)
- [CVE-2018-0058](https://insights.sbomify.com/CVE-2018-0058/): MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service (medium 5.9)
- [CVE-2018-0057](https://insights.sbomify.com/CVE-2018-0057/): Business logic in Junos OS (medium 6.1)
- [CVE-2018-0056](https://insights.sbomify.com/CVE-2018-0056/): MX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfaces (medium 6.5)
- [CVE-2018-0055](https://insights.sbomify.com/CVE-2018-0055/): Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message (medium 6.5)
- [CVE-2018-0054](https://insights.sbomify.com/CVE-2018-0054/): QFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet frames (medium 6.5)
- [CVE-2018-0053](https://insights.sbomify.com/CVE-2018-0053/): Auth bypass in Junos OS (medium 6.8)
- [CVE-2018-0052](https://insights.sbomify.com/CVE-2018-0052/): Junos OS: Unauthenticated remote root access possible when RSH service is enabled (high 7.2)
- [CVE-2018-0051](https://insights.sbomify.com/CVE-2018-0051/): Denial of service in Junos OS (high 7.5)
- [CVE-2018-0050](https://insights.sbomify.com/CVE-2018-0050/): Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash. (high 7.5)
- [CVE-2018-0049](https://insights.sbomify.com/CVE-2018-0049/): Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash. (high 7.5)
- [CVE-2018-0048](https://insights.sbomify.com/CVE-2018-0048/): Denial of service in Junos OS (high 7.5)
- [CVE-2018-0047](https://insights.sbomify.com/CVE-2018-0047/): Junos Space Security Director: XSS vulnerability in web administration (high 8.0)
- [CVE-2018-0046](https://insights.sbomify.com/CVE-2018-0046/): Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS (high 8.8)
- [CVE-2018-0045](https://insights.sbomify.com/CVE-2018-0045/): Denial of service in Junos OS (high 8.8)
- [CVE-2018-0044](https://insights.sbomify.com/CVE-2018-0044/): NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS (critical 9.8)
- [CVE-2018-0043](https://insights.sbomify.com/CVE-2018-0043/): Junos OS: RPD daemon crashes upon receipt of specific MPLS packet (high 8.8)
- [CVE-2018-0042](https://insights.sbomify.com/CVE-2018-0042/): Information disclosure in juniper:contrail service orchestration (critical 9.8)
- [CVE-2018-0041](https://insights.sbomify.com/CVE-2018-0041/): Contrail Service Orchestration: Hardcoded credentials for Keystone service. (critical 9.8)
- [CVE-2018-0040](https://insights.sbomify.com/CVE-2018-0040/): Contrail Service Orchestration: hardcoded cryptographic certificates and keys (critical 9.8)
- [CVE-2018-0039](https://insights.sbomify.com/CVE-2018-0039/): Contrail Service Orchestration: Hardcoded credentials for Grafana service (medium 6.5)
- [CVE-2018-0038](https://insights.sbomify.com/CVE-2018-0038/): Hardcoded credentials in juniper:contrail service orchestration (critical 9.8)
- [CVE-2018-0037](https://insights.sbomify.com/CVE-2018-0037/): Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages (critical 9.8)
- [CVE-2018-0035](https://insights.sbomify.com/CVE-2018-0035/): Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images (medium 4.4)
- [CVE-2018-0034](https://insights.sbomify.com/CVE-2018-0034/): Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core (medium 5.3)
- [CVE-2018-0032](https://insights.sbomify.com/CVE-2018-0032/): Junos OS: RPD crash when receiving a crafted BGP UPDATE (high 7.5)
- [CVE-2018-0031](https://insights.sbomify.com/CVE-2018-0031/): Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules (medium 5.3)
- [CVE-2018-0030](https://insights.sbomify.com/CVE-2018-0030/): Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet. (high 7.5)
- [CVE-2018-0029](https://insights.sbomify.com/CVE-2018-0029/): Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0' (medium 5.7)
- [CVE-2018-0027](https://insights.sbomify.com/CVE-2018-0027/): Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service (high 7.5)
- [CVE-2018-0026](https://insights.sbomify.com/CVE-2018-0026/): Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade (medium 4.7)
- [CVE-2018-0025](https://insights.sbomify.com/CVE-2018-0025/): Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication (medium 6.1)
- [CVE-2018-0024](https://insights.sbomify.com/CVE-2018-0024/): Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root (high 7.8)
- [CVE-2018-0023](https://insights.sbomify.com/CVE-2018-0023/): Junos Snapshot Administrator (JSNAPy) world writeable default configuration file permission (medium 5.5)
- [CVE-2018-0022](https://insights.sbomify.com/CVE-2018-0022/): Junos OS: Mbuf leak due to processing MPLS packets in VPLS network. (high 7.5)
- [CVE-2018-0021](https://insights.sbomify.com/CVE-2018-0021/): Junos OS: Short MacSec keys may allow man-in-the-middle attacks. (high 8.8)
- [CVE-2018-0020](https://insights.sbomify.com/CVE-2018-0020/): Junos OS: rpd daemon cores due to malformed BGP UPDATE packet (high 7.5)
- [CVE-2018-0019](https://insights.sbomify.com/CVE-2018-0019/): Junos: Denial of service vulnerability in SNMP MIB-II subagent daemon (mib2d). (medium 5.3)
- [CVE-2018-0018](https://insights.sbomify.com/CVE-2018-0018/): Security feature bypass in Junos OS (high 7.5)
- [CVE-2018-0017](https://insights.sbomify.com/CVE-2018-0017/): SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT (high 7.5)
- [CVE-2018-0016](https://insights.sbomify.com/CVE-2018-0016/): Junos OS: Kernel crash upon receipt of crafted CLNP datagrams (critical 9.8)
- [CVE-2018-0015](https://insights.sbomify.com/CVE-2018-0015/): AppFormix: Debug Shell Command Execution in AppFormix Agent (critical 9.8)
- [CVE-2018-0014](https://insights.sbomify.com/CVE-2018-0014/): ScreenOS: Etherleak vulnerability found on ScreenOS device (medium 4.3)
- [CVE-2018-0013](https://insights.sbomify.com/CVE-2018-0013/): Junos Space: Local File Inclusion Vulnerability (medium 6.5)
- [CVE-2018-0012](https://insights.sbomify.com/CVE-2018-0012/): Junos Space: Local privilege escalation vulnerability in Junos Space (high 7.8)
- [CVE-2018-0011](https://insights.sbomify.com/CVE-2018-0011/): Junos Space: Reflected XSS vulnerability in Junos Space management interface (medium 5.4)
- [CVE-2018-0010](https://insights.sbomify.com/CVE-2018-0010/): Privilege escalation in juniper:junos space (medium 6.5)
- [CVE-2018-0009](https://insights.sbomify.com/CVE-2018-0009/): SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured. (medium 5.4)
- [CVE-2018-0008](https://insights.sbomify.com/CVE-2018-0008/): Junos OS: commit script may allow unauthenticated root login upon reboot (medium 6.2)
- [CVE-2018-0007](https://insights.sbomify.com/CVE-2018-0007/): Memory corruption in juniper:junos (critical 9.8)
- [CVE-2018-0006](https://insights.sbomify.com/CVE-2018-0006/): Junos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejects (medium 6.5)
- [CVE-2018-0005](https://insights.sbomify.com/CVE-2018-0005/): Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic. (high 7.4)
- [CVE-2018-0004](https://insights.sbomify.com/CVE-2018-0004/): Junos OS: Kernel Denial of Service Vulnerability (medium 6.5)
- [CVE-2018-0003](https://insights.sbomify.com/CVE-2018-0003/): Junos OS: A crafted MPLS packet may lead to a kernel crash (medium 6.5)
- [CVE-2018-0002](https://insights.sbomify.com/CVE-2018-0002/): MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled. (high 8.2)
- [CVE-2018-0001](https://insights.sbomify.com/CVE-2018-0001/): Junos: Unauthenticated Remote Code Execution through J-Web interface (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/163/