Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-0044

An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are Juniper Networks Junos OS: 18.1 versions prior to 18.1R4 on NFX Series.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 6.8
Products affected by CVE-2018-0044
  • Juniper » Nfx150 » Version: N/A
    cpe:2.3:h:juniper:nfx150:-
  • Juniper » Nfx250 » Version: N/A
    cpe:2.3:h:juniper:nfx250:-
  • Juniper » Junos » Version: 18.1r2
    cpe:2.3:o:juniper:junos:18.1r2


Contact Us

Shodan ® - All rights reserved