CVE-2018-0008

An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the [system scripts commit] stanza. Certain commit scripts that work without a problem during normal commit may cause unexpected behavior upon reboot which can leave the system in a state where root CLI login is allowed without a password due to the system reverting to a "safe mode" authentication state. Lastly, only logging in physically to the console port as root, with no password, will work. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71 on SRX; 12.3X48 versions prior to 12.3X48-D55 on SRX; 14.1 versions prior to 14.1R9; 14.1X53 versions prior to 14.1X53-D40 on QFX, EX; 14.2 versions prior to 14.2R7-S9, 14.2R8; 15.1 versions prior to 15.1F5-S7, 15.1F6-S8, 15.1R5-S6, 15.1R6; 15.1X49 versions prior to 15.1X49-D110 on SRX; 15.1X53 versions prior to 15.1X53-D232 on QFX5200/5110; 15.1X53 versions prior to 15.1X53-D49, 15.1X53-D470 on NFX; 15.1X53 versions prior to 15.1X53-D65 on QFX10K; 16.1 versions prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue.

• CWE-287

• http://www.securitytracker.com/id/1040186Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10835Vendor Advisory
• https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
• http://www.securitytracker.com/id/1040186Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10835Vendor Advisory
• https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E

Published

Jan 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0002On SRX Series and MX Series devices with a Service PIC with …8.2
• CVE-2018-0003A specially crafted MPLS packet received or processed by the…6.5
• CVE-2018-0004A sustained sequence of different types of normal transit tr…6.5
• CVE-2018-0005QFX and EX Series switches configured to drop traffic when t…7.4
• CVE-2018-0006A high rate of VLAN authentication attempts sent from an adj…6.5
• CVE-2018-0007An unauthenticated network-based attacker able to send a mal…
• CVE-2018-0009On Juniper Networks SRX series devices, firewall rules confi…5.4
• CVE-2018-0010A vulnerability in the Juniper Networks Junos Space Security…
• CVE-2018-0011A reflected cross site scripting (XSS) vulnerability in Juno…5.4
• CVE-2018-0012Junos Space is affected by a privilege escalation vulnerabil…7.8
• CVE-2018-0013A local file inclusion vulnerability in Juniper Networks Jun…6.5
• CVE-2018-0014Juniper Networks ScreenOS devices do not pad Ethernet packet…4.3