CVE-2019-0070

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to take control of the entire system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1 on NFX Series.

• CWE-20

• https://kb.juniper.net/JSA10977Vendor Advisory
• https://kb.juniper.net/JSA10977Vendor Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0064On SRX5000 Series devices, if 'set security zones security-z…7.5
• CVE-2019-0065On MX Series, when the SIP ALG is enabled, receipt of a cert…7.5
• CVE-2019-0066An unexpected status return value weakness in the Next-Gener…7.5
• CVE-2019-0067Receipt of a specific link-local IPv6 packet destined to the…6.5
• CVE-2019-0068The SRX flowd process, responsible for packet forwarding, ma…7.5
• CVE-2019-0069On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX511…5.5
• CVE-2019-0071Veriexec is a kernel-based file integrity subsystem in Junos…7.8
• CVE-2019-0072An Unprotected Storage of Credentials vulnerability in the i…5.5
• CVE-2019-0073The PKI keys exported using the command "run request securit…7.1
• CVE-2019-0074A path traversal vulnerability in NFX150 Series and QFX10K S…5.5
• CVE-2019-0075A vulnerability in the srxpfe process on Protocol Independen…7.5
• CVE-2019-0086Insufficient access control vulnerability in Dynamic Applica…