01 Record

CVE-2019-0069

Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text

MediumPUBLISHEDCNA: juniper

CNA base score5.9 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

View raw JSON

02 Description

Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 13.5% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2019-10-09 19:26Z7 YR AGO

Last updated

2024-09-16 23:16Z2 YR AGO

Reserved

2018-10-11

Assigning CNA

juniper

Record state

PUBLISHED

Severity

Medium (CVSS 5.9)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Weaknesses

CWE-319Cleartext Transmission of Sensitive InformationBase

Data version

5.1

Document digest

22027d2f002f44ed1f9f2c001d06bba18e1d4d6e24ec396e938bbca81706edc8

05 Affected products

VendorProductVersionsPlatforms

Juniper NetworksJunos OS15.1X49 to < 15.1X49-D110, 15.1X53 to < 15.1X53-D234, 15.1X53 to < 15.1X53-D68, 17.1 to < 17.1R2-S8, 17.1R3,, 17.2 to < 17.2R1-S7, 17.2R2-S6, 17.2R3, 17.3 to < 17.3R2, 14.1X53 to < 14.1X53-D47, 15.1 to < 15.1R7, 16.1R7 to < 16.1R7, 17.1 to < 17.1R2-S10, 17.1R3, 17.2 to < 17.2R3, 17.3 to < 17.3R3, 17.4 to < 17.4R2, 18.1 to < 18.1R2, 15.1X53 to < 15.1X53-D496, 17.2 to < 17.2R3-S1, 17.3 to < 17.3R3-S4, 17.4 to < 17.4R2-S4, 17.4R3, 18.1 to < 18.1R3-S4, 18.2 to < 18.2R2-S3, 18.2R3, 18.3 to < 18.3R1-S3, 18.3R2, 18.4 to < 18.4R1-S1, 18.4R2vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K, QFX5110 QFX5200, QFX10K, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K, ACX5000, EX4600, QFX5100, NFX

06 References

kb.juniper.nethttps://kb.juniper.net/JSA10969x_refsource_CONFIRM

07 Remediation

For vSRX, SRX1500, SRX4000 Series, QFX5110, QFX5200, QFX10K Series: The following software releases have been updated to resolve this specific issue: 15.1X49-D110, 15.1X53-D234, 15.1X53-D68, 17.1R2-S8, 17.1R3, 17.2R1-S7, 17.2R2-S6, 17.2R3, 17.3R2, 17.4R1, and all subsequent releases. For ACX5000, EX4600 and QFX5100 Series: The following software releases have been updated to resolve this specific issue: 14.1X53-D47, 15.1R7, 16.1R7, 17.1R3, 17.2R3, 17.3R3, 17.4R2, 18.1R2, 18.2R1, and all subsequent releases. For NFX Series: The following software releases have been updated to resolve this specific issue: 15.1X53-D496, 17.2R3-S1, 17.3R3-S4, 17.4R3, 18.1R3-S4, 18.2R3, 18.3R2, 18.4R1-S1, 18.4R2, 19.1R1 and all subsequent releases. In addition to the upgrade, it is recommended to change the password and as the credentials might have been logged prior to the upgrade to the fixed release, in the SRX, QFX, ACX and EX Series it is recommended to clear the log files and archives.