Vulnerability · Published Oct 12, 2023 · Assigned by juniper

CVE-2023-44194Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges

High 8.4

In plain English

A high-severity incorrect default permissions in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)8.4High

Exploit odds (30 days)0.2%top 92.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS allows an unauthenticated attacker with local access to the device to create a backdoor with root privileges. The issue is caused by improper directory permissions on a certain system directory, allowing an attacker with access to this directory to create a backdoor with root privileges. This issue affects Juniper Networks Junos OS: * All versions prior to 20.4R3-S5; * 21.1 versions prior to 21.1R3-S4; * 21.2 versions prior to 21.2R3-S4; * 21.3 versions prior to 21.3R3-S3; * 21.4 versions prior to 21.4R3-S1.

Affected products (as reported)

Vendor	Product	Versions
Juniper Networks	Junos OS	0 – before 20.4R3-S521.1 – before 21.1R3-S421.2 – before 21.2R3-S421.3 – before 21.3R3-S321.4 – before 21.4R3-S1

Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://supportportal.juniper.net/JSA73158 vendor-advisory