CVE-2018-0018: SRX Series: A crafted packet may lead to information disclosure and firewall rule bypass during compilation of IDP policies.

Security readout for executives and security teams

A vulnerable Juniper SRX firewall using IDP policies may let a remote attacker bypass intended firewall rules and learn protected network information. The issue is limited to SRX devices running affected Junos OS releases with IDP policies applied to rules. Exposure is likely limited to Juniper SRX deployments on Junos OS 12.1X46, 12.3X48, or 15.1X49 before the fixed releases, where IDP policies are applied to one or more rules. Prioritize remediation where SRX firewalls protect sensitive networks and use IDP policies. The main business risk is failure of expected segmentation controls, enabling reconnaissance or access paths that security teams assume are blocked. Mitigation focus: Upgrade SRX Junos OS to 12.1X46-D60, 12.3X48-D35, 15.1X49-D60, or later.; Confirm whether IDP policies are applied to firewall rules.; If IDP is not required, remove IDP policy use through approved change control..

Prepared

May 24, 2026, 09:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.