How severe is CVE-2001-0589?

CVE-2001-0589 has a CVSS 2.0 base score of 2.1, rated low severity.

Is CVE-2001-0589 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-0589?

CVE-2001-0589 primarily affects Juniper Netscreen Screenos. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2001-0589?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2001-0589 published?

CVE-2001-0589 was published on 2001-08-22 and last updated on 2026-06-16.

CVE-2001-0589

CVE-2001-0589 is a low-severity vulnerability in Juniper Netscreen Screenos with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.1)
EPSS exploit prediction: 0% (25th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Juniper Netscreen Screenos
Published: 2001-08-22
Last modified: 2026-06-16

Description

NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns.

Frequently asked questions

What is CVE-2001-0589?: NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns.
How severe is CVE-2001-0589?: CVE-2001-0589 has a CVSS 2.0 base score of 2.1, rated low severity.
Is CVE-2001-0589 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-0589?: CVE-2001-0589 primarily affects Juniper Netscreen Screenos. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2001-0589?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2001-0589 published?: CVE-2001-0589 was published on 2001-08-22 and last updated on 2026-06-16.

References

Affected products (4)

cpe:2.3:o:juniper:netscreen_screenos:1.64:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:1.66:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.5:*:*:*:*:*:*:*

More vulnerabilities in Juniper Netscreen Screenos

CVE-2018-0059 — Medium (CVSS 5.4): A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote…
CVE-2005-2640 — Medium (CVSS 5.0): Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE…
CVE-2004-1446 — Medium (CVSS 5.0): Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to…
CVE-2002-1547 — Medium (CVSS 5.0): Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH…
CVE-2002-2150 — Medium (CVSS 5.0): Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to…
CVE-2002-0891 — Medium (CVSS 5.0): The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1,…

All CVEs affecting Juniper Netscreen Screenos →