What is CVE-2018-0043?

CVE-2018-0043 is a high-severity vulnerability in Juniper Ex2200, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2018-10-10.

How severe is CVE-2018-0043?

High severity. CVSS v3 base score is 8.8 out of 10.

Improper input validation in Juniper Ex2200

CVE-2018-0043

Receipt of a specific MPLS packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execution. By continuously sending specific MPLS packets, an attacker can repeatedly crash the RPD proces…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.012 (62.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

sirt@juniper.net (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
sirt@juniper.net (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-0043?: CVE-2018-0043 is a high-severity vulnerability in Juniper Ex2200, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2018-10-10.
How severe is CVE-2018-0043?: High severity. CVSS v3 base score is 8.8 out of 10.