Privilege Escalation Vulnerability Affects Juniper Networks Junos OS Evolved

CVE-2024-39546

What is CVE-2024-39546?

A serious vulnerability exists in the Socket Intercept (SI) command file interface of Juniper Networks' Junos OS Evolved. This flaw allows an authenticated, low-privilege local attacker to manipulate specific files, which can lead to the execution of arbitrary commands with root privileges. The consequence of this vulnerability is potential privilege escalation, which can ultimately compromise the integrity of the affected system. Several versions of Junos OS Evolved are impacted, necessitating immediate attention for those operating prior to the specified patched versions.

References