VulnSocial

CVE-2018-0001(juniper / junos)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D67; 12.3 versions prior to 12.3R12-S5; 12.3X48 versions prior to 12.3X48-D35; 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D44, 14.1X53-D50; 14.2 versions prior to 14.2R7-S7, 14.2R8; 15.1 versions prior to 15.1R3; 15.1X49 versions prior to 15.1X49-D30; 15.1X53 versions prior to 15.1X53-D70.

juniper CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • junos

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Affected systems

Vendors
juniper
Products
junos

9 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-11-07: 211-07
Referenced assets1 URL
Full discourse2 posts
  • 🇰🇷Dave_Joe_9377🇦🇺@Dave_Joe_9377

    CVE-2018-0001 | Using a room after checkout A use-after-free flaw is like using a stale room key after the room has been reassigned. Older PHP versions within Juniper's Junos J-Web management interface contained such a defect. A remote attacker without authentication might execute code in the J-Web process by supplying crafted data. The record names specific affected Junos release ranges, not every Junos version or every PHP website. The lesson: management interfaces are high-value entry points. Restrict access and update affected releases.

    100019
    3.2K followersView on X
  • 🇰🇷Dave_Joe_9377🇦🇺@Dave_Joe_9377

    The affected surface was Juniper's J-Web management interface. This does not mean every Junos release or every PHP site had this CVE. Lesson: update affected releases and restrict access to management interfaces. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2018/0xxx/CVE-2018-0001.json

    000016
    3.2K followersView on X
CPE platform detail67 entries

67 of 67 entries

PartVendorProductVersionTarget SWTarget HW
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.1x46--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3--
OSjuniperjunos12.3x48--
OSjuniperjunos12.3x48--
OSjuniperjunos12.3x48--
OSjuniperjunos12.3x48--
OSjuniperjunos12.3x48--
OSjuniperjunos14.1--
OSjuniperjunos14.1--
OSjuniperjunos14.1--
OSjuniperjunos14.1--
OSjuniperjunos14.1--
OSjuniperjunos14.1--
OSjuniperjunos14.1--
OSjuniperjunos14.1x53--
OSjuniperjunos14.1x53--
OSjuniperjunos14.1x53--
OSjuniperjunos14.1x53--
OSjuniperjunos14.1x53--
OSjuniperjunos14.1x53--
OSjuniperjunos14.1x53--
OSjuniperjunos14.1x53--
OSjuniperjunos14.1x53--
OSjuniperjunos14.2--
OSjuniperjunos14.2--
OSjuniperjunos14.2--
OSjuniperjunos14.2--
OSjuniperjunos14.2--
OSjuniperjunos14.2--
OSjuniperjunos14.2--
OSjuniperjunos15.1--
OSjuniperjunos15.1--
OSjuniperjunos15.1x49--
OSjuniperjunos15.1x49--
OSjuniperjunos15.1x49--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--
OSjuniperjunos15.1x53--

Explore more

Back to dashboardjuniper CVEsjunos vulnerabilities