Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2023-44194

Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS allows an unauthenticated attacker with local access to the device to create a backdoor with root privileges. The issue is caused by improper directory permissions on a certain system directory, allowing an attacker with access to this directory to create a backdoor with root privileges. This issue affects Juniper Networks Junos OS: * All versions prior to 20.4R3-S5; * 21.1 versions prior to 21.1R3-S4; * 21.2 versions prior to 21.2R3-S4; * 21.3 versions prior to 21.3R3-S3; * 21.4 versions prior to 21.4R3-S1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

Default version status: unaffected

  • 0 to < 20.4R3-S5affected
  • 21.1 to < 21.1R3-S4affected
  • 21.2 to < 21.2R3-S4affected
  • 21.3 to < 21.3R3-S3affected
  • 21.4 to < 21.4R3-S1affected

References