Privilege Escalation Vulnerability Affects Juniper Networks Junos OS Evolved
CVE-2024-39546

7HIGH

Key Information:

Vendor

Juniper Networks
Status
Junos Os Evolved
Vendor
CVE Published:
11 July 2024

Badges

👾 Exploit Exists

What is CVE-2024-39546?

A serious vulnerability exists in the Socket Intercept (SI) command file interface of Juniper Networks' Junos OS Evolved. This flaw allows an authenticated, low-privilege local attacker to manipulate specific files, which can lead to the execution of arbitrary commands with root privileges. The consequence of this vulnerability is potential privilege escalation, which can ultimately compromise the integrity of the affected system. Several versions of Junos OS Evolved are impacted, necessitating immediate attention for those operating prior to the specified patched versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Junos OS Evolved 0 < 21.2R3-S8-EVO

Junos OS Evolved 21.4 < 21.4R3-S6-EVO

Junos OS Evolved 22.1 < 22.1R3-S5-EVO

References

https://supportportal.juniper.net/JSA83008
vendor-advisory

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.