CVE-2019-0007

Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability

Description

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F5 on vMX Series.

Remediation

Solution:

  • The following software releases have been updated to resolve this specific issue: 15.1F5, and all subsequent releases.

Workaround:

  • When used in whole, the following workaround methods may reduce the risk of information exfiltration from the customer environment, and reduce the chance of being subjected to, or propagating D/DoS attacks against other targets. Deny incoming packets with invalid source addresses From reaching the device. Utilize egress filtering to prevent invalid / spoofed packets from leaving your network(s). Enable stateful firewall filters where possible. Utilize SYN-based anti-flood protection mechanisms where possible to reduce or avoid D/DoS attacks.

Category

9.3
CVSS
Severity: Critical
CVSS 3.0 •
CVSS 2.0 •
EPSS 0.50%
Vendor Advisory juniper.net
Affected: Juniper Networks Junos OS
Published at:
Updated at:

References

Link Tags
https://kb.juniper.net/JSA10903 vendor advisory
http://www.securityfocus.com/bid/106564 vdb entry third party advisory

Frequently Asked Questions

What is the severity of CVE-2019-0007?
CVE-2019-0007 has been scored as a critical severity vulnerability.
How to fix CVE-2019-0007?
To fix CVE-2019-0007: The following software releases have been updated to resolve this specific issue: 15.1F5, and all subsequent releases.
Is CVE-2019-0007 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2019-0007 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2019-0007?
CVE-2019-0007 affects Juniper Networks Junos OS.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.