CVE-2018-0018 : Security Advisory and Response

A crafted packet may lead to information disclosure and firewall rule bypass during compilation of IDP policies on SRX Series devices.

Understanding CVE-2018-0018

This CVE involves a vulnerability in Juniper Networks' Junos OS affecting SRX Series devices.

What is CVE-2018-0018?

During the compilation of IDP policies on SRX Series devices, unauthorized individuals can bypass firewall rules by sending manipulated packets, potentially leading to information disclosure and control over the targeted device.

The Impact of CVE-2018-0018

Attack Complexity: High
Attack Vector: Network
Base Score: 7.5 (High)
Confidentiality Impact: Low
Integrity Impact: High
Privileges Required: None
Scope: Changed
User Interaction: None

Technical Details of CVE-2018-0018

This section provides detailed technical information about the vulnerability.

Vulnerability Description

Attackers can bypass firewall rules on SRX Series devices by sending crafted packets during IDP policy compilation.

Affected Systems and Versions

Platforms: SRX
Affected Product: Junos OS
Affected Versions: 12.1X46-D60, 12.3X48-D35, 15.1X49-D60

Exploitation Mechanism

The issue affects SRX Series devices with IDP configured.

Mitigation and Prevention

Protect your systems from CVE-2018-0018 with the following steps:

Immediate Steps to Take

Update to fixed software releases: 12.1X46-D60, 12.3X48-D35, 15.1X49-D60, 17.3R1, or later.
Apply the latest sigpack for IDP signatures.

Long-Term Security Practices

Regularly update IDP policies and signatures.
Monitor for unusual network activity.
Implement network segmentation to limit the impact of potential breaches.

Patching and Updates

Ensure all SRX Series devices are running the latest software releases.