Log in Start free

Vulnerability · Published Jan 12, 2024 · Assigned by juniper

CVE-2024-21591Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution

Critical 9.8

In plain English

A critical-severity out-of-bounds write in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 17.7% (higher than 97% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)17.7%top 2.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS), or Remote Code Execution (RCE) and obtain root privileges on the device. This issue is caused by use of an insecure function allowing an attacker to overwrite arbitrary memory. This issue affects Juniper Networks Junos OS SRX Series and EX Series: * Junos OS versions earlier than 20.4R3-S9; * Junos OS 21.2 versions earlier than 21.2R3-S7; * Junos OS 21.3 versions earlier than 21.3R3-S5; * Junos OS 21.4 versions earlier than 21.4R3-S5; * Junos OS 22.1 versions earlier than 22.1R3-S4; * Junos OS 22.2 versions earlier than 22.2R3-S3; * Junos OS 22.3 versions earlier than 22.3R3-S2; * Junos OS 22.4 versions earlier than 22.4R2-S2, 22.4R3.

Affected products (as reported)

VendorProductVersions
Juniper Networks Junos OS 0 – before 20.4R3-S921.2 – before 21.2R3-S721.3 – before 21.3R3-S521.4 – before 21.4R3-S522.1 – before 22.1R3-S422.2 – before 22.2R3-S322.3 – before 22.3R3-S222.4 – before 22.4R2-S2, 22.4R3

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References