Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-47495

Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Authorization Bypass Through User-Controlled Key vulnerability allows a locally authenticated attacker with shell access to gain full control of the device when Dual Routing Engines (REs) are in use on Juniper Networks Junos OS Evolved devices. This issue affects: Juniper Networks Junos OS Evolved with dual-REs: * All versions before 21.2R3-S8-EVO, * from 21.4-EVO before 21.4R3-S8-EVO, * from 22.2-EVO before 22.2R3-S4-EVO, * from 22.3-EVO before 22.3R3-S4-EVO, * from 22.4-EVO before 22.4R3-S3-EVO, * from 23.2-EVO before 23.2R2-S1-EVO, * from 23.4-EVO before 23.4R2-S1-EVO. This issue does not affect Juniper Networks Junos OS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS Evolved

Default version status: unaffected

  • 0 to < 21.2R3-S8-EVOaffected
  • 21.4-EVO to < 21.4R3-S8-EVOaffected
  • 22.2-EVO to < 22.2R3-S4-EVOaffected
  • 22.3-EVO to < 22.3R3-S4-EVOaffected
  • 22.4-EVO to < 22.4R3-S3-EVOaffected
  • 23.2-EVO to < 23.2R2-S1-EVOaffected
  • 23.4-EVO to < 23.4R2-S1-EVOaffected

References