CVE-2019-0033

SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.

HIGH

7.5

CVSS Score

Published: April 10, 2019 at 08:13 PM UTC

Updated: June 17, 2026 at 02:07 AM UTC

14 products affected across 2 vendorsJunosSRX5600SRX5800

Using Junos OS by Juniper Networks?

Get instant alerts when new vulnerabilities affect Junos OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 2%

Description

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service (DoS). This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D25 prior to 12.1X46-D71, 12.1X46-D73 on SRX Series; 12.3X48 versions prior to 12.3X48-D50 on SRX Series; 15.1X49 versions prior to 15.1X49-D75 on SRX Series.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Junos · Juniper Networks

95%

12.1X46-D25 ≤ v < 12.1X46*12.1x46 ≤ v ≤ 12.1x46-d1012.1x46-d25 ≤ v < 12.1x46-d7112.3X48 ≤ v < 12.3X48-D5012.3x48 ≤ v < 12.3x48-d5015.1X49 ≤ v < 15.1X49-D7515.1x49 ≤ v < 15.1x49-d7512.1X46-D25 12.3X48 15.1X49

Affected range stops below 12.1X46*, so it looks safe — our inference, not a vendor statement

Affected range stops below 12.1x46-d71, so it looks safe — our inference, not a vendor statement

Affected range stops below 12.3x48-d50, so it looks safe — our inference, not a vendor statement

Affected range stops below 15.1x49-d75, so it looks safe — our inference, not a vendor statement

juniper-srx100 (environment) · juniper-srx110 (environment) · juniper-srx1400 (environment) · juniper-srx210 (environment) · juniper-srx220 (environment) · juniper-srx240 (environment) · juniper-srx3400 (environment) · juniper-srx3600 (environment) · juniper-srx5400 (environment) · juniper-srx550 (environment) · juniper-srx5600 (environment) · juniper-srx5800 (environment) · juniper-srx650 (environment)

SRX100 · Juniperdevice

80%

All versions

SRX110 · Juniperdevice

80%

All versions

SRX1400 · Juniperdevice

80%

All versions

SRX210 · Juniperdevice

80%

All versions