[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQDusAWlNShBjtkdVjmsFD5JBf1Wln5Zr8a24s9g5OiM":3,"g5a-risk:CVE-2018-0044":142},{"success":4,"data":5,"meta":140},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":63,"references":64,"referencesCount":76,"weaknesses":77,"weaknessesCount":86,"isActivelyExploited":87,"cisaInfo":15,"otxData":15,"relatedBlogPosts":88,"seoMetadata":89,"configurations":114,"relatedVendorCves":138,"notableEvents":139},"CVE-2018-0044","What is CVE-2018-0044?","An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to \"yes\". Affected releases are Juniper Networks Junos OS: 18.1 versions prior to 18.1R4 on NFX Series.","An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of th...","2018-10-10T18:29:00.53","2019-10-09T23:31:04.783",8.1,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":37,"CVSSMetricV40":15},null,[17,28],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED",2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":36,"ImpactScore":27},"sirt@juniper.net","Secondary",{"Version":21,"VectorString":32,"AttackVector":22,"AttackComplexity":33,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","LOW",9.8,"CRITICAL",3.9,[38],{"Source":18,"Type":19,"CVSSData":39,"BaseSeverity":42,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":40,"VectorString":41,"AccessVector":22,"AccessComplexity":42,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.01342,[47,47,47,47,47,47,47],"High",[51,56,60],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"juniper","junos","*","cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":58,"criteria":59,"vulnerable":4},"nfx150","-","cpe:2.3:h:juniper:nfx150:-:*:*:*:*:*:*:*",{"vendor":52,"product":61,"version":58,"criteria":62,"vulnerable":4},"nfx250","cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",3,[65,71],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105565","Securityfocus",[69,70],"Third Party Advisory","VDB Entry",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fkb.juniper.net\u002FJSA10878","Juniper",[75],"Vendor Advisory",2,[78],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":90,"metaDescription":91,"keywords":92,"canonicalUrl":93,"structuredData":94},"What is CVE-2018-0044? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-0044, a high severity cyber security vulnerability from 2018. An insecure SSHD configuration in Juniper Device Manager (JD...","CVE-2018-0044, CVE-2018-0044 vulnerability, CVE-2018-0044 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, juniper security, junos vulnerability, nfx150 vulnerability, nfx250 vulnerability","\u002Fwhat-is\u002Fcve-2018-0044",{"@context":95,"@type":96,"headline":90,"description":91,"datePublished":10,"dateModified":11,"author":97,"publisher":101,"about":105,"mainEntityOfPage":109,"articleSection":112,"keywords":113},"https:\u002F\u002Fschema.org","TechArticle",{"@type":98,"name":99,"url":100},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":98,"name":99,"url":100,"logo":102},{"@type":103,"url":104},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":106,"name":6,"description":107,"additionalType":108},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":110,"@id":111},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-0044","Cybersecurity","CVE-2018-0044, CVE-2018-0044 vulnerability, CVE-2018-0044 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[115,129],{"Operator":116,"Negate":15,"Nodes":117},"AND",[118,125],{"Operator":119,"Negate":15,"CPEMatch":120},"OR",[121],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":122,"VersionStartExcluding":15,"VersionStartIncluding":123,"VersionEndExcluding":15,"VersionEndIncluding":124},"B02AC7C6-A207-484A-B4BA-6A4A36A22C02","18.1r1","18.1r3",{"Operator":119,"Negate":15,"CPEMatch":126},[127],{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D9AE81FA-B0F3-4F0B-A2D1-2BB590345058",{"Operator":116,"Negate":15,"Nodes":130},[131,134],{"Operator":119,"Negate":15,"CPEMatch":132},[133],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":122,"VersionStartExcluding":15,"VersionStartIncluding":123,"VersionEndExcluding":15,"VersionEndIncluding":124},{"Operator":119,"Negate":15,"CPEMatch":135},[136],{"Vulnerable":15,"Criteria":62,"MatchCriteriaID":137,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7EB08A27-7777-4538-ADC4-9D2F89963C13",[],[],{"lastModified":11,"cacheTime":141,"version":40},1792256420163,{"score":143,"band":144,"action":145,"scoredAt":146},54,"Medium","Plan remediation","2026-10-16T06:44:56.473795+00:00"]