Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-28983

Junos OS Evolved: Shell Injection vulnerability in the gNOI server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4 version 21.4R1-EVO and later versions prior to 22.1R1-EVO.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS Evolved

  • 21.4R1-EVO to < 21.4*affected
  • 22.1 to < 22.1R1-EVOaffected

References