Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.4

JunOS SRX app-id updates can be intercepted

CVE-2019-0054 · published 7 years ago
Summary

The SRX Series devices running JunOS versions before 15.1X49-D120 may accept a forged update signature because the client does not properly verify the certificate. An attacker on the network could replace the legitimate app‑identification signatures, potentially reading or altering traffic. Update the device to the latest 15.1X49‑D120 release or later to fix the validation check.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
juniper junos 15.1x49
cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*
Original advisory text
An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middl...
An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
7.4 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-295Improper Certificate Validation
CWE-300Channel Accessible by Non-Endpoint
Timeline
Published9 Oct 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-0054 · NVD
Track software like this
Free during beta