CVE-2019-0007

Estado: ModificadaCrítica (10)—

El software de la serie vMX emplea un número de secuencia IP ID predecible. Esto deja el sistema y a los clientes que se conectan a través del dispositivo vulnerables a una familia de ataques que depende del uso de números de secuencia IP ID como su método de ataque básico. Se encontró el problema durante un análisis de seguridad interno del producto. Las versiones afectadas son Juniper Networks Junos OS: versiones 15.1 anteriores a la 15.1F5 en la serie NFX.

CVSS

Versión: 3.0
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Puntuación base: 10

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 1.73%
Percentil entre todas las CVEs puntuadas: 77
Fecha de la puntuación: 8/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos

CWE

CWE-330

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2019-0007",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 9.3,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 10,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "15.1",
              "lessThan": "15.1F5",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "vMX Series"
          ]
        }
      ]
    }
  ],
  "published": "2019-01-15T21:29:01.087",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/106564",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10903",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "http://www.securityfocus.com/bid/106564",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/JSA10903",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-330"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F5 on vMX Series."
    },
    {
      "lang": "es",
      "value": "El software de la serie vMX emplea un número de secuencia IP ID predecible. Esto deja el sistema y a los clientes que se conectan a través del dispositivo vulnerables a una familia de ataques que depende del uso de números de secuencia IP ID como su método de ataque básico. Se encontró el problema durante un análisis de seguridad interno del producto. Las versiones afectadas son Juniper Networks Junos OS: versiones 15.1 anteriores a la 15.1F5 en la serie NFX."
    }
  ],
  "lastModified": "2026-06-17T02:07:29.583",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "52699E2B-450A-431C-81E3-DC4483C8B4F2"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F72C850A-0530-4DB7-A553-7E19F82122B5"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7FE2089C-F341-4DC1-B76D-633BC699306D"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "27175D9A-CA2C-4218-8042-835E25DFCA43"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2754C2DF-DF6E-4109-9463-38B4E0465B77"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "104858BD-D31D-40E0-8524-2EC311F10EAC"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3B557965-0040-4048-B56C-F564FF28635B"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
            },
            {
              "criteria": "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7C4940BB-3715-4FAD-89FE-D876F957A098"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}