What is CVE-2018-0019?

CVE-2018-0019 is a medium-severity vulnerability in Juniper Ex2300, classified under Improper Input Validation. CVSS score: 5.3/10. Published 2018-04-11.

How severe is CVE-2018-0019?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Improper input validation in Juniper Ex2300

CVE-2018-0019

A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib2d) may allow a remote network based attacker to cause the mib2d process to crash resulting in a denial of service condition (DoS) for the SNMP subsystem. While a mib2d process crash can disrupt the network monitoring via SNMP, it does not impact routing, switching or firewall functionalities. SNMP is disabled by default on devices running Junos OS. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D76; 12.3 versions prior to 12.3R12-S7, 12.3R13; 12.3X48 versions prior to 12.3X48-D65; 14.1 versions prior to 14.1R9; 14.1X53 versions prior to 14.1X53-D130; 15.1 versions prior to 15.1F2-S20, 15.1F6-S10, 15.1R7; 15.1X49 versions prior to 15.1X49-D130; 15.1X53 versions prior to 15.1X53-D233, 15.1X53-D471, 15.1X53-D472, 15.1X53-D58, 15.1X53-D66; 16.1 versions prior to 16.1R5-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D47; 16.1X70 versions prior to 16.1X70-D10; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R2-S6, 17.1R3;

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Published 2018-04-11 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

EPSS exploit prediction

EPSS: 0.015 (74.3th percentile), scored 2026-11-01.

Low probability of exploitation in the next 30 days, but still tracked. 74th percentile — 74.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.015 · newest: 0.015 · change: 0.000

Affected products

Juniper Ex2300
Juniper Ex3400
Juniper Ex4300
Juniper Ex4600
Juniper Junos — versions 15.1x49, 14.1, 14.1x53
Juniper Nfx150
Juniper Nfx250
Juniper Qfabric
Juniper Qfx10
Juniper Qfx5100

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

kb.juniper.net/JSA10847 (Patch, Mitigation, Vendor Advisory)
www.securitytracker.com/id/1040787 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2018-0019?: CVE-2018-0019 is a medium-severity vulnerability in Juniper Ex2300, classified under Improper Input Validation. CVSS score: 5.3/10. Published 2018-04-11.
How severe is CVE-2018-0019?: Medium severity. CVSS v3 base score is 5.3 out of 10.