CVE-2018-0021
Last modified
CVE-2018-0021 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. If all 64 digits of the connectivity association name (CKN) key or all 32 digits of the connectivity association key (CAK) key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an attacker will discover the secret passphrases configured for these keys through dictionary-based and brute-force-based attacks using spoofed packets. EPSS estimates a 0.63% chance of exploitation in the next 30 days.
Description
If all 64 digits of the connectivity association name (CKN) key or all 32 digits of the connectivity association key (CAK) key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an attacker will discover the secret passphrases configured for these keys through dictionary-based and brute-force-based attacks using spoofed packets. Affected releases are Juniper Networks Junos OS: 14.1 versions prior to 14.1R10, 14.1R9; 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D100; 15.1X53 versions prior to 15.1X53-D59; 16.1 versions prior to 16.1R3-S8, 16.1R4-S8, 16.1R5; 16.2 versions prior to 16.2R1-S6, 16.2R2; 17.1 versions prior to 17.1R2.
Metrics
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Junos | 15.1x49 | — |
| Juniper | Junos | 14.1 | — |
| Juniper | Junos | 14.1x53 | — |
| Juniper | Junos | 15.1x53 | — |
| Juniper | Junos | 16.1 | R1 |
| Juniper | Junos | 16.2 | R1 |
| Juniper | Junos | 17.1 | R1 |
| Juniper | Junos | 15.1 | — |
References
- http://www.securitytracker.com/id/1040789Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10854Vendor Advisory
- http://www.securitytracker.com/id/1040789Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10854Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-0021?
How severe is CVE-2018-0021?
How do I fix CVE-2018-0021?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-0015A malicious user with unrestricted access to the AppFormix a…9.8
- CVE-2018-0016Receipt of a specially crafted Connectionless Network Protoc…9.8
- CVE-2018-0017A vulnerability in the Network Address Translation - Protoco…7.5
- CVE-2018-0018On SRX Series devices during compilation of IDP policies, an…7.5
- CVE-2018-0019A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib…5.3
- CVE-2018-0020Junos OS may be impacted by the receipt of a malformed BGP U…7.5
- CVE-2018-0022A Junos device with VPLS routing-instances configured on one…7.5
- CVE-2018-0023JSNAPy is an open source python version of Junos Snapshot Ad…5.5
- CVE-2018-0024An Improper Privilege Management vulnerability in a shell se…7.8
- CVE-2018-0025When an SRX Series device is configured to use HTTP/HTTPS pa…6.1
- CVE-2018-0026After Junos OS device reboot or upgrade, the stateless firew…4.7
- CVE-2018-0027Receipt of a crafted or malformed RSVP PATH message may caus…7.5
Are you affected by CVE-2018-0021?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST