{"id":"CVE-2018-0014","aliases":["EUVD-2018-0839","GHSA-xgmx-gwqj-mmc5"],"status":"published","title":"ScreenOS: Etherleak vulnerability found on ScreenOS device","description":"Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00603,"percentile":0.49118,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-01-10T22:00:00Z","modified":"2026-06-17T01:29:23Z","products":[{"vendor":"juniper","product":"screenos"},{"vendor":"juniper networks","product":"screenos"}],"references":[{"url":"https://kb.juniper.net/JSA10841","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040185","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0014"},{"url":"https://github.com/advisories/GHSA-xgmx-gwqj-mmc5"}],"sources":{"cve":[{"id":"CVE-2018-0014","title":"ScreenOS: Etherleak vulnerability found on ScreenOS device","description":"Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.","status":"published","published":"2018-01-10T22:00:00Z","modified":"2024-09-16T16:37:27.824Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:12.160284Z"}],"euvd":[{"id":"EUVD-2018-0839","description":"Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.","status":"published","published":"2018-01-10T22:00:00Z","modified":"2024-09-16T16:37:27Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:55:50.035364Z"}],"ghsa":[{"id":"GHSA-xgmx-gwqj-mmc5","title":"Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets...","description":"Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.","status":"published","published":"2022-05-13T01:36:02Z","modified":"2023-02-01T05:08:54Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:53.268012Z"}],"nvd":[{"id":"CVE-2018-0014","description":"Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.","status":"published","published":"2018-01-10T22:29:01.463Z","modified":"2026-06-17T01:29:23.373Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:22.309028Z"}]}}