cvelistv5 - cve-2024-2973

CVE-2024-2973 (GCVE-0-2024-2973)

Vulnerability from cvelistv5 – Published: 2024-06-27 20:17 – Updated: 2024-08-01 19:32

Summary

An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability. No other Juniper Networks products or platforms are affected by this issue. This issue affects: Session Smart Router: * All versions before 5.6.15, * from 6.0 before 6.1.9-lts, * from 6.2 before 6.2.5-sts. Session Smart Conductor: * All versions before 5.6.15, * from 6.0 before 6.1.9-lts, * from 6.2 before 6.2.5-sts. WAN Assurance Router: * 6.0 versions before 6.1.9-lts, * 6.2 versions before 6.2.5-sts.

Severity ?

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/V:C/RE:M/U:Red

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

juniper

References

URL

Tags

	https://supportportal.juniper.net/JSA83126	vendor-advisory
	https://support.juniper.net/support/eol/software/ssr/	related

Impacted products

Vendor

Product

Version

Juniper Networks

Session Smart Router

Affected: 0 , < 5.6.15 (semver)
Affected: 6.0 , < 6.1.9-lts (semver)
Affected: 6.2 , < 6.2.5-sts (semver)

	Juniper Networks	Session Smart Conductor	Affected: 0 , < 5.6.15 (semver) Affected: 6.0 , < 6.1.9-lts (semver) Affected: 6.2 , < 6.2.5-sts (semver)
	Juniper Networks	WAN Assurance Router	Affected: 6.0 , < 6.1.9-lts (semver) Affected: 6.2 , < 6.2.5-sts (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:juniper:session_smart_conductor:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "session_smart_conductor",
            "vendor": "juniper",
            "versions": [
              {
                "lessThan": "5.6.15",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "6.1.9-lts",
                "status": "affected",
                "version": "6.0",
                "versionType": "custom"
              },
              {
                "lessThan": "6.2.5-sts",
                "status": "affected",
                "version": "6.2",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:juniper:wan_assurance_router:6.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wan_assurance_router",
            "vendor": "juniper",
            "versions": [
              {
                "lessThan": "6.1.9-lts",
                "status": "affected",
                "version": "6.0",
                "versionType": "custom"
              },
              {
                "lessThan": "6.2.5-sts",
                "status": "affected",
                "version": "6.2",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:juniper:session_smart_router:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "session_smart_router",
            "vendor": "juniper",
            "versions": [
              {
                "lessThan": "5.6.15",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "6.1.9-lts",
                "status": "affected",
                "version": "6.0",
                "versionType": "custom"
              },
              {
                "lessThan": "6.2.5-sts",
                "status": "affected",
                "version": "6.2",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-2973",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-02T03:55:38.720Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T19:32:42.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://supportportal.juniper.net/JSA83126"
          },
          {
            "tags": [
              "related",
              "x_transferred"
            ],
            "url": "https://support.juniper.net/support/eol/software/ssr/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Session Smart Router",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "5.6.15",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.9-lts",
              "status": "affected",
              "version": "6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.2.5-sts",
              "status": "affected",
              "version": "6.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Session Smart Conductor",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "5.6.15",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.9-lts",
              "status": "affected",
              "version": "6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.2.5-sts",
              "status": "affected",
              "version": "6.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WAN Assurance Router",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "6.1.9-lts",
              "status": "affected",
              "version": "6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.2.5-sts",
              "status": "affected",
              "version": "6.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2024-06-27T19:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\u003cbr\u003e\u003cp\u003e\u003cb\u003eOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\u003c/b\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eNo other Juniper Networks products or platforms are affected by this issue.\u003cbr\u003e\u003c/p\u003e\u003cp\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003eThis issue affects:\u003c/p\u003e\u003cp\u003eSession Smart Router:\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions before 5.6.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.0 before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.5-sts.\u003c/li\u003e\u003c/ul\u003e\u003cbr\u003eSession Smart Conductor:\u0026nbsp;\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions before 5.6.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.0 before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.5-sts.\u0026nbsp;\u003c/li\u003e\u003c/ul\u003e\u003cbr\u003eWAN Assurance Router:\u0026nbsp;\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e6.0 versions before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003e6.2 versions before 6.2.5-sts.\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\nOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\n\n\n\n\nNo other Juniper Networks products or platforms are affected by this issue.\n\n\n\n\n\nThis issue affects:\n\nSession Smart Router:\u00a0\n\n\n\n  *  All versions before 5.6.15,\u00a0\n  *  from 6.0 before 6.1.9-lts,\u00a0\n  *  from 6.2 before 6.2.5-sts.\n\n\n\nSession Smart Conductor:\u00a0\n\n\n\n  *  All versions before 5.6.15,\u00a0\n  *  from 6.0 before 6.1.9-lts,\u00a0\n  *  from 6.2 before 6.2.5-sts.\u00a0\n\n\n\nWAN Assurance Router:\u00a0\n\n\n\n  *  6.0 versions before 6.1.9-lts,\u00a0\n  *  6.2 versions before 6.2.5-sts."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
            }
          ],
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "YES",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/V:C/RE:M/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-27T20:25:06.777Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://supportportal.juniper.net/JSA83126"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://support.juniper.net/support/eol/software/ssr/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe following software releases have been updated to resolve this issue:\u003c/p\u003e\u003cp\u003e\u003cbr\u003e\u003cstrong\u003eSession Smart Router:\u003c/strong\u003e SSR-5.6.15, SSR-6.1.9-lts, SSR-6.2.5-sts, and subsequent releases. \u003c/p\u003e\u003cp\u003e\u003cbr\u003eIt is suggested to upgrade all affected systems to these versions of software. In a Conductor-managed deployment, it is sufficient to upgrade the Conductor nodes only and the fix will be applied automatically to all connected routers. As practical, the routers should still be upgraded to a fixed version however they will not be vulnerable once they connect to an upgraded Conductor.\u003c/p\u003e\u003cp\u003e\u003cbr\u003eThis vulnerability has been patched automatically on affected devices for WAN Assurance routers connected to the Mist Cloud. For systems that are provisioned in a High-Availability cluster, these should be upgraded to a patched version as soon as practical (SSR-6.1.9 or SSR-6.2.5).\u003c/p\u003e\u003cp\u003e\u003cbr\u003eIt is important to note that the fix is applied automatically on managed routers by a Conductor or on WAN assurance routers has no impact on data-plane functions of the router. The application of the fix is non-disruptive to production traffic. There may be a momentary downtime (less than 30 seconds) to the web-based management and APIs however this will resolve quickly.\u003c/p\u003e"
            }
          ],
          "value": "The following software releases have been updated to resolve this issue:\n\n\nSession Smart Router: SSR-5.6.15, SSR-6.1.9-lts, SSR-6.2.5-sts, and subsequent releases. \n\n\nIt is suggested to upgrade all affected systems to these versions of software. In a Conductor-managed deployment, it is sufficient to upgrade the Conductor nodes only and the fix will be applied automatically to all connected routers. As practical, the routers should still be upgraded to a fixed version however they will not be vulnerable once they connect to an upgraded Conductor.\n\n\nThis vulnerability has been patched automatically on affected devices for WAN Assurance routers connected to the Mist Cloud. For systems that are provisioned in a High-Availability cluster, these should be upgraded to a patched version as soon as practical (SSR-6.1.9 or SSR-6.2.5).\n\n\nIt is important to note that the fix is applied automatically on managed routers by a Conductor or on WAN assurance routers has no impact on data-plane functions of the router. The application of the fix is non-disruptive to production traffic. There may be a momentary downtime (less than 30 seconds) to the web-based management and APIs however this will resolve quickly."
        }
      ],
      "source": {
        "advisory": "JSA83126",
        "defect": [
          "I95-56931"
        ],
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-06-27T19:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThere are no known workarounds for this issue.\u003c/p\u003e"
            }
          ],
          "value": "There are no known workarounds for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2024-2973",
    "datePublished": "2024-06-27T20:17:50.239Z",
    "dateReserved": "2024-03-26T23:06:22.816Z",
    "dateUpdated": "2024-08-01T19:32:42.563Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\\nOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\\n\\n\\n\\n\\nNo other Juniper Networks products or platforms are affected by this issue.\\n\\n\\n\\n\\n\\nThis issue affects:\\n\\nSession Smart Router:\\u00a0\\n\\n\\n\\n  *  All versions before 5.6.15,\\u00a0\\n  *  from 6.0 before 6.1.9-lts,\\u00a0\\n  *  from 6.2 before 6.2.5-sts.\\n\\n\\n\\nSession Smart Conductor:\\u00a0\\n\\n\\n\\n  *  All versions before 5.6.15,\\u00a0\\n  *  from 6.0 before 6.1.9-lts,\\u00a0\\n  *  from 6.2 before 6.2.5-sts.\\u00a0\\n\\n\\n\\nWAN Assurance Router:\\u00a0\\n\\n\\n\\n  *  6.0 versions before 6.1.9-lts,\\u00a0\\n  *  6.2 versions before 6.2.5-sts.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad de omisi\\u00f3n de autenticaci\\u00f3n mediante una ruta o canal alternativo en el enrutador o conductor inteligente de sesi\\u00f3n de Juniper Networks que se ejecuta con un par redundante permite a un atacante basado en la red omitir la autenticaci\\u00f3n y tomar el control total del dispositivo. Esta vulnerabilidad solo afecta a los enrutadores o conductores que se ejecutan en configuraciones redundantes de alta disponibilidad. Este problema no afecta a ning\\u00fan otro producto o plataforma de Juniper Networks. Este problema afecta a: Session Smart Router: * Todas las versiones anteriores a 5.6.15, * desde 6.0 anteriores a 6.1.9-lts, * desde 6.2 anteriores a 6.2.5-sts. Session Smart Conductor: *Todas las versiones anteriores a 5.6.15, *desde 6.0 antes de 6.1.9-lts, *desde 6.2 antes de 6.2.5-sts. Enrutador de garant\\u00eda de WAN: * Versiones 6.0 anteriores a 6.1.9-lts, * Versiones 6.2 anteriores a 6.2.5-sts.\"}]",
      "id": "CVE-2024-2973",
      "lastModified": "2024-11-21T09:10:57.817",
      "metrics": "{\"cvssMetricV40\": [{\"source\": \"sirt@juniper.net\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"4.0\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:M/U:Red\", \"baseScore\": 10.0, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"vulnerableSystemConfidentiality\": \"HIGH\", \"vulnerableSystemIntegrity\": \"HIGH\", \"vulnerableSystemAvailability\": \"HIGH\", \"subsequentSystemConfidentiality\": \"HIGH\", \"subsequentSystemIntegrity\": \"HIGH\", \"subsequentSystemAvailability\": \"HIGH\", \"exploitMaturity\": \"NOT_DEFINED\", \"confidentialityRequirements\": \"NOT_DEFINED\", \"integrityRequirements\": \"NOT_DEFINED\", \"availabilityRequirements\": \"NOT_DEFINED\", \"modifiedAttackVector\": \"NOT_DEFINED\", \"modifiedAttackComplexity\": \"NOT_DEFINED\", \"modifiedAttackRequirements\": \"NOT_DEFINED\", \"modifiedPrivilegesRequired\": \"NOT_DEFINED\", \"modifiedUserInteraction\": \"NOT_DEFINED\", \"modifiedVulnerableSystemConfidentiality\": \"NOT_DEFINED\", \"modifiedVulnerableSystemIntegrity\": \"NOT_DEFINED\", \"modifiedVulnerableSystemAvailability\": \"NOT_DEFINED\", \"modifiedSubsequentSystemConfidentiality\": \"NOT_DEFINED\", \"modifiedSubsequentSystemIntegrity\": \"NOT_DEFINED\", \"modifiedSubsequentSystemAvailability\": \"NOT_DEFINED\", \"safety\": \"NOT_DEFINED\", \"automatable\": \"YES\", \"recovery\": \"NOT_DEFINED\", \"valueDensity\": \"CONCENTRATED\", \"vulnerabilityResponseEffort\": \"MODERATE\", \"providerUrgency\": \"RED\"}}], \"cvssMetricV31\": [{\"source\": \"sirt@juniper.net\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\", \"baseScore\": 10.0, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 6.0}]}",
      "published": "2024-06-27T21:15:15.037",
      "references": "[{\"url\": \"https://support.juniper.net/support/eol/software/ssr/\", \"source\": \"sirt@juniper.net\"}, {\"url\": \"https://supportportal.juniper.net/JSA83126\", \"source\": \"sirt@juniper.net\"}, {\"url\": \"https://support.juniper.net/support/eol/software/ssr/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://supportportal.juniper.net/JSA83126\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "sirt@juniper.net",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": "[{\"source\": \"sirt@juniper.net\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-288\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-2973\",\"sourceIdentifier\":\"sirt@juniper.net\",\"published\":\"2024-06-27T21:15:15.037\",\"lastModified\":\"2024-11-21T09:10:57.817\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\\nOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\\n\\n\\n\\n\\nNo other Juniper Networks products or platforms are affected by this issue.\\n\\n\\n\\n\\n\\nThis issue affects:\\n\\nSession Smart Router:\u00a0\\n\\n\\n\\n  *  All versions before 5.6.15,\u00a0\\n  *  from 6.0 before 6.1.9-lts,\u00a0\\n  *  from 6.2 before 6.2.5-sts.\\n\\n\\n\\nSession Smart Conductor:\u00a0\\n\\n\\n\\n  *  All versions before 5.6.15,\u00a0\\n  *  from 6.0 before 6.1.9-lts,\u00a0\\n  *  from 6.2 before 6.2.5-sts.\u00a0\\n\\n\\n\\nWAN Assurance Router:\u00a0\\n\\n\\n\\n  *  6.0 versions before 6.1.9-lts,\u00a0\\n  *  6.2 versions before 6.2.5-sts.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo en el enrutador o conductor inteligente de sesi\u00f3n de Juniper Networks que se ejecuta con un par redundante permite a un atacante basado en la red omitir la autenticaci\u00f3n y tomar el control total del dispositivo. Esta vulnerabilidad solo afecta a los enrutadores o conductores que se ejecutan en configuraciones redundantes de alta disponibilidad. Este problema no afecta a ning\u00fan otro producto o plataforma de Juniper Networks. Este problema afecta a: Session Smart Router: * Todas las versiones anteriores a 5.6.15, * desde 6.0 anteriores a 6.1.9-lts, * desde 6.2 anteriores a 6.2.5-sts. Session Smart Conductor: *Todas las versiones anteriores a 5.6.15, *desde 6.0 antes de 6.1.9-lts, *desde 6.2 antes de 6.2.5-sts. Enrutador de garant\u00eda de WAN: * Versiones 6.0 anteriores a 6.1.9-lts, * Versiones 6.2 anteriores a 6.2.5-sts.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"sirt@juniper.net\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:M/U:Red\",\"baseScore\":10.0,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"YES\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"CONCENTRATED\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"RED\"}}],\"cvssMetricV31\":[{\"source\":\"sirt@juniper.net\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":10.0,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":6.0}]},\"weaknesses\":[{\"source\":\"sirt@juniper.net\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-288\"}]}],\"references\":[{\"url\":\"https://support.juniper.net/support/eol/software/ssr/\",\"source\":\"sirt@juniper.net\"},{\"url\":\"https://supportportal.juniper.net/JSA83126\",\"source\":\"sirt@juniper.net\"},{\"url\":\"https://support.juniper.net/support/eol/software/ssr/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://supportportal.juniper.net/JSA83126\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://supportportal.juniper.net/JSA83126\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://support.juniper.net/support/eol/software/ssr/\", \"tags\": [\"related\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T19:32:42.563Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-2973\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-28T14:29:23.788783Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:h:juniper:session_smart_conductor:*:*:*:*:*:*:*:*\"], \"vendor\": \"juniper\", \"product\": \"session_smart_conductor\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.6.15\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"6.0\", \"lessThan\": \"6.1.9-lts\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"6.2\", \"lessThan\": \"6.2.5-sts\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:juniper:wan_assurance_router:6.0:*:*:*:*:*:*:*\"], \"vendor\": \"juniper\", \"product\": \"wan_assurance_router\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0\", \"lessThan\": \"6.1.9-lts\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"6.2\", \"lessThan\": \"6.2.5-sts\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:juniper:session_smart_router:*:*:*:*:*:*:*:*\"], \"vendor\": \"juniper\", \"product\": \"session_smart_router\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.6.15\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"6.0\", \"lessThan\": \"6.1.9-lts\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"6.2\", \"lessThan\": \"6.2.5-sts\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-28T14:34:21.293Z\"}}], \"cna\": {\"title\": \"Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed\", \"source\": {\"defect\": [\"I95-56931\"], \"advisory\": \"JSA83126\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 10, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 10, \"Automatable\": \"YES\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"valueDensity\": \"CONCENTRATED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/V:C/RE:M/U:Red\", \"providerUrgency\": \"RED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"HIGH\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"MODERATE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Juniper Networks\", \"product\": \"Session Smart Router\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.6.15\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.0\", \"lessThan\": \"6.1.9-lts\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.2\", \"lessThan\": \"6.2.5-sts\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Juniper Networks\", \"product\": \"Session Smart Conductor\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.6.15\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.0\", \"lessThan\": \"6.1.9-lts\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.2\", \"lessThan\": \"6.2.5-sts\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Juniper Networks\", \"product\": \"WAN Assurance Router\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0\", \"lessThan\": \"6.1.9-lts\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.2\", \"lessThan\": \"6.2.5-sts\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\", \"base64\": false}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-06-27T19:00:00.000Z\", \"value\": \"Initial Publication\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"The following software releases have been updated to resolve this issue:\\n\\n\\nSession Smart Router: SSR-5.6.15, SSR-6.1.9-lts, SSR-6.2.5-sts, and subsequent releases. \\n\\n\\nIt is suggested to upgrade all affected systems to these versions of software. In a Conductor-managed deployment, it is sufficient to upgrade the Conductor nodes only and the fix will be applied automatically to all connected routers. As practical, the routers should still be upgraded to a fixed version however they will not be vulnerable once they connect to an upgraded Conductor.\\n\\n\\nThis vulnerability has been patched automatically on affected devices for WAN Assurance routers connected to the Mist Cloud. For systems that are provisioned in a High-Availability cluster, these should be upgraded to a patched version as soon as practical (SSR-6.1.9 or SSR-6.2.5).\\n\\n\\nIt is important to note that the fix is applied automatically on managed routers by a Conductor or on WAN assurance routers has no impact on data-plane functions of the router. The application of the fix is non-disruptive to production traffic. There may be a momentary downtime (less than 30 seconds) to the web-based management and APIs however this will resolve quickly.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThe following software releases have been updated to resolve this issue:\u003c/p\u003e\u003cp\u003e\u003cbr\u003e\u003cstrong\u003eSession Smart Router:\u003c/strong\u003e SSR-5.6.15, SSR-6.1.9-lts, SSR-6.2.5-sts, and subsequent releases. \u003c/p\u003e\u003cp\u003e\u003cbr\u003eIt is suggested to upgrade all affected systems to these versions of software. In a Conductor-managed deployment, it is sufficient to upgrade the Conductor nodes only and the fix will be applied automatically to all connected routers. As practical, the routers should still be upgraded to a fixed version however they will not be vulnerable once they connect to an upgraded Conductor.\u003c/p\u003e\u003cp\u003e\u003cbr\u003eThis vulnerability has been patched automatically on affected devices for WAN Assurance routers connected to the Mist Cloud. For systems that are provisioned in a High-Availability cluster, these should be upgraded to a patched version as soon as practical (SSR-6.1.9 or SSR-6.2.5).\u003c/p\u003e\u003cp\u003e\u003cbr\u003eIt is important to note that the fix is applied automatically on managed routers by a Conductor or on WAN assurance routers has no impact on data-plane functions of the router. The application of the fix is non-disruptive to production traffic. There may be a momentary downtime (less than 30 seconds) to the web-based management and APIs however this will resolve quickly.\u003c/p\u003e\", \"base64\": false}]}], \"datePublic\": \"2024-06-27T19:00:00.000Z\", \"references\": [{\"url\": \"https://supportportal.juniper.net/JSA83126\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://support.juniper.net/support/eol/software/ssr/\", \"tags\": [\"related\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"There are no known workarounds for this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThere are no known workarounds for this issue.\u003c/p\u003e\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\\nOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\\n\\n\\n\\n\\nNo other Juniper Networks products or platforms are affected by this issue.\\n\\n\\n\\n\\n\\nThis issue affects:\\n\\nSession Smart Router:\\u00a0\\n\\n\\n\\n  *  All versions before 5.6.15,\\u00a0\\n  *  from 6.0 before 6.1.9-lts,\\u00a0\\n  *  from 6.2 before 6.2.5-sts.\\n\\n\\n\\nSession Smart Conductor:\\u00a0\\n\\n\\n\\n  *  All versions before 5.6.15,\\u00a0\\n  *  from 6.0 before 6.1.9-lts,\\u00a0\\n  *  from 6.2 before 6.2.5-sts.\\u00a0\\n\\n\\n\\nWAN Assurance Router:\\u00a0\\n\\n\\n\\n  *  6.0 versions before 6.1.9-lts,\\u00a0\\n  *  6.2 versions before 6.2.5-sts.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\u003cbr\u003e\u003cp\u003e\u003cb\u003eOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\u003c/b\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eNo other Juniper Networks products or platforms are affected by this issue.\u003cbr\u003e\u003c/p\u003e\u003cp\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003eThis issue affects:\u003c/p\u003e\u003cp\u003eSession Smart Router:\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions before 5.6.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.0 before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.5-sts.\u003c/li\u003e\u003c/ul\u003e\u003cbr\u003eSession Smart Conductor:\u0026nbsp;\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions before 5.6.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.0 before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.5-sts.\u0026nbsp;\u003c/li\u003e\u003c/ul\u003e\u003cbr\u003eWAN Assurance Router:\u0026nbsp;\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e6.0 versions before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003e6.2 versions before 6.2.5-sts.\u003c/li\u003e\u003c/ul\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-288\", \"description\": \"CWE-288 Authentication Bypass Using an Alternate Path or Channel\"}]}], \"providerMetadata\": {\"orgId\": \"8cbe9d5a-a066-4c94-8978-4b15efeae968\", \"shortName\": \"juniper\", \"dateUpdated\": \"2024-06-27T20:25:06.777Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-2973\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-08-01T19:32:42.563Z\", \"dateReserved\": \"2024-03-26T23:06:22.816Z\", \"assignerOrgId\": \"8cbe9d5a-a066-4c94-8978-4b15efeae968\", \"datePublished\": \"2024-06-27T20:17:50.239Z\", \"assignerShortName\": \"juniper\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

FKIE_CVE-2024-2973

Vulnerability from fkie_nvd - Published: 2024-06-27 21:15 - Updated: 2024-11-21 09:10

Severity ?

10.0 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Summary

References

	URL	Tags
	sirt@juniper.net	https://support.juniper.net/support/eol/software/ssr/
	sirt@juniper.net	https://supportportal.juniper.net/JSA83126
	af854a3a-2127-422b-91ae-364da2661108	https://support.juniper.net/support/eol/software/ssr/
	af854a3a-2127-422b-91ae-364da2661108	https://supportportal.juniper.net/JSA83126

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\nOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\n\n\n\n\nNo other Juniper Networks products or platforms are affected by this issue.\n\n\n\n\n\nThis issue affects:\n\nSession Smart Router:\u00a0\n\n\n\n  *  All versions before 5.6.15,\u00a0\n  *  from 6.0 before 6.1.9-lts,\u00a0\n  *  from 6.2 before 6.2.5-sts.\n\n\n\nSession Smart Conductor:\u00a0\n\n\n\n  *  All versions before 5.6.15,\u00a0\n  *  from 6.0 before 6.1.9-lts,\u00a0\n  *  from 6.2 before 6.2.5-sts.\u00a0\n\n\n\nWAN Assurance Router:\u00a0\n\n\n\n  *  6.0 versions before 6.1.9-lts,\u00a0\n  *  6.2 versions before 6.2.5-sts."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo en el enrutador o conductor inteligente de sesi\u00f3n de Juniper Networks que se ejecuta con un par redundante permite a un atacante basado en la red omitir la autenticaci\u00f3n y tomar el control total del dispositivo. Esta vulnerabilidad solo afecta a los enrutadores o conductores que se ejecutan en configuraciones redundantes de alta disponibilidad. Este problema no afecta a ning\u00fan otro producto o plataforma de Juniper Networks. Este problema afecta a: Session Smart Router: * Todas las versiones anteriores a 5.6.15, * desde 6.0 anteriores a 6.1.9-lts, * desde 6.2 anteriores a 6.2.5-sts. Session Smart Conductor: *Todas las versiones anteriores a 5.6.15, *desde 6.0 antes de 6.1.9-lts, *desde 6.2 antes de 6.2.5-sts. Enrutador de garant\u00eda de WAN: * Versiones 6.0 anteriores a 6.1.9-lts, * Versiones 6.2 anteriores a 6.2.5-sts."
    }
  ],
  "id": "CVE-2024-2973",
  "lastModified": "2024-11-21T09:10:57.817",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.0,
        "source": "sirt@juniper.net",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "YES",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "RED",
          "subAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "HIGH",
          "subIntegrityImpact": "HIGH",
          "userInteraction": "NONE",
          "valueDensity": "CONCENTRATED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:M/U:Red",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "MODERATE"
        },
        "source": "sirt@juniper.net",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-06-27T21:15:15.037",
  "references": [
    {
      "source": "sirt@juniper.net",
      "url": "https://support.juniper.net/support/eol/software/ssr/"
    },
    {
      "source": "sirt@juniper.net",
      "url": "https://supportportal.juniper.net/JSA83126"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.juniper.net/support/eol/software/ssr/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://supportportal.juniper.net/JSA83126"
    }
  ],
  "sourceIdentifier": "sirt@juniper.net",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-288"
        }
      ],
      "source": "sirt@juniper.net",
      "type": "Secondary"
    }
  ]
}

CERTFR-2024-AVI-0525

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

L'éditeur indique que seuls les équipements configurés en mode haute disponibilité sont affectés.

Impacted products

Vendor	Product	Description
Juniper Networks	N/A	Session Smart Router et Session Smart Conductor versions 6.2.x antérieures à 6.2.5-sts
Juniper Networks	N/A	Session Smart Router et Session Smart Conductor versions 6.x antérieures à 6.1.9-lts
Juniper Networks	N/A	Session Smart Router et Session Smart Conductor versions antérieures à 5.6.15
Juniper Networks	N/A	WAN Assurance Router versions 6.2.x antérieures à 6.2.5-sts
Juniper Networks	N/A	WAN Assurance Router versions 6.x antérieures à 6.1.9-lts

References

Title

Publication Time

Tags

Bulletin de sécurité Juniper Networks

2024-06-27

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Session Smart Router et Session Smart Conductor versions 6.2.x ant\u00e9rieures \u00e0  6.2.5-sts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Session Smart Router et Session Smart Conductor versions 6.x ant\u00e9rieures \u00e0 6.1.9-lts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Session Smart Router et Session Smart Conductor versions ant\u00e9rieures \u00e0 5.6.15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WAN Assurance Router versions 6.2.x ant\u00e9rieures \u00e0  6.2.5-sts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WAN Assurance Router versions 6.x ant\u00e9rieures \u00e0 6.1.9-lts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "L\u0027\u00e9diteur indique que seuls les \u00e9quipements configur\u00e9s en mode haute disponibilit\u00e9 sont affect\u00e9s.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-2973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2973"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0525",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-06-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Juniper Networks. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper Networks",
  "vendor_advisories": [
    {
      "published_at": "2024-06-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks",
      "url": "https://supportportal.juniper.net/s/article/2024-06-Out-Of-Cycle-Security-Bulletin-Session-Smart-Router-SSR-On-redundant-router-deployments-API-authentication-can-be-bypassed-CVE-2024-2973"
    }
  ]
}

CERTFR-2024-AVI-0525

Vulnerability from certfr_avis - Published: - Updated:

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

L'éditeur indique que seuls les équipements configurés en mode haute disponibilité sont affectés.

Impacted products

Vendor	Product	Description
Juniper Networks	N/A	Session Smart Router et Session Smart Conductor versions 6.2.x antérieures à 6.2.5-sts
Juniper Networks	N/A	Session Smart Router et Session Smart Conductor versions 6.x antérieures à 6.1.9-lts
Juniper Networks	N/A	Session Smart Router et Session Smart Conductor versions antérieures à 5.6.15
Juniper Networks	N/A	WAN Assurance Router versions 6.2.x antérieures à 6.2.5-sts
Juniper Networks	N/A	WAN Assurance Router versions 6.x antérieures à 6.1.9-lts

References

Title

Publication Time

Tags

Bulletin de sécurité Juniper Networks

2024-06-27

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Session Smart Router et Session Smart Conductor versions 6.2.x ant\u00e9rieures \u00e0  6.2.5-sts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Session Smart Router et Session Smart Conductor versions 6.x ant\u00e9rieures \u00e0 6.1.9-lts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Session Smart Router et Session Smart Conductor versions ant\u00e9rieures \u00e0 5.6.15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WAN Assurance Router versions 6.2.x ant\u00e9rieures \u00e0  6.2.5-sts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WAN Assurance Router versions 6.x ant\u00e9rieures \u00e0 6.1.9-lts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "L\u0027\u00e9diteur indique que seuls les \u00e9quipements configur\u00e9s en mode haute disponibilit\u00e9 sont affect\u00e9s.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-2973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2973"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0525",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-06-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Juniper Networks. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper Networks",
  "vendor_advisories": [
    {
      "published_at": "2024-06-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks",
      "url": "https://supportportal.juniper.net/s/article/2024-06-Out-Of-Cycle-Security-Bulletin-Session-Smart-Router-SSR-On-redundant-router-deployments-API-authentication-can-be-bypassed-CVE-2024-2973"
    }
  ]
}

NCSC-2024-0271

Vulnerability from csaf_ncscnl - Published: 2024-06-28 09:55 - Updated: 2024-06-28 09:55

Summary

Kwetsbaarheid verholpen in Juniper Session Smart Router

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Juniper heeft een kwetsbaarheid verholpen in Session Smart Router (SSR).

Interpretaties

SSR is een software-router toepassing voor SD-WAN systemen. Een ongeauthenticeerde kwaadwillende met toegang tot de infrastructuur kan de kwetsbaarheid misbruiken om toegang te krijgen tot het systeem en dit over te nemen. Beperkende voorwaarde is wel dat de SSR oplossing is geïmplementeerd in een High-Availability configuratie met een redundant peer.

Oplossingen

Juniper heeft updates uitgebracht om de kwetsbaarheid te verhelpen in de kwetsbare Session Smart Routers en Session Smart Conductors. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-288

Authentication Bypass Using an Alternate Path or Channel

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Juniper heeft een kwetsbaarheid verholpen in Session Smart Router (SSR).",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "SSR is een software-router toepassing voor SD-WAN systemen. Een ongeauthenticeerde kwaadwillende met toegang tot de infrastructuur kan de kwetsbaarheid misbruiken om toegang te krijgen tot het systeem en dit over te nemen.\nBeperkende voorwaarde is wel dat de SSR oplossing is ge\u00efmplementeerd in een High-Availability configuratie met een redundant peer.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Juniper heeft updates uitgebracht om de kwetsbaarheid te verhelpen in de kwetsbare Session Smart Routers en Session Smart Conductors. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Authentication Bypass Using an Alternate Path or Channel",
        "title": "CWE-288"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://supportportal.juniper.net/JSA83126"
      }
    ],
    "title": "Kwetsbaarheid verholpen in Juniper Session Smart Router",
    "tracking": {
      "current_release_date": "2024-06-28T09:55:17.082602Z",
      "id": "NCSC-2024-0271",
      "initial_release_date": "2024-06-28T09:55:17.082602Z",
      "revision_history": [
        {
          "date": "2024-06-28T09:55:17.082602Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "session_smart_conductor",
            "product": {
              "name": "session_smart_conductor",
              "product_id": "CSAFPID-1489299",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:juniper_networks:session_smart_conductor:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "session_smart_conductor",
            "product": {
              "name": "session_smart_conductor",
              "product_id": "CSAFPID-1489300",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:juniper_networks:session_smart_conductor:6.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "session_smart_conductor",
            "product": {
              "name": "session_smart_conductor",
              "product_id": "CSAFPID-1489301",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:juniper_networks:session_smart_conductor:6.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "session_smart_router",
            "product": {
              "name": "session_smart_router",
              "product_id": "CSAFPID-1489296",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:juniper_networks:session_smart_router:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "session_smart_router",
            "product": {
              "name": "session_smart_router",
              "product_id": "CSAFPID-1489297",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:juniper_networks:session_smart_router:6.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "session_smart_router",
            "product": {
              "name": "session_smart_router",
              "product_id": "CSAFPID-1489298",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:juniper_networks:session_smart_router:6.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wan_assurance_router",
            "product": {
              "name": "wan_assurance_router",
              "product_id": "CSAFPID-1489302",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:juniper_networks:wan_assurance_router:6.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wan_assurance_router",
            "product": {
              "name": "wan_assurance_router",
              "product_id": "CSAFPID-1489303",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:juniper_networks:wan_assurance_router:6.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "session_smart_conductor",
            "product": {
              "name": "session_smart_conductor",
              "product_id": "CSAFPID-1489356",
              "product_identification_helper": {
                "cpe": "cpe:2.3:h:juniper_networks:session_smart_conductor:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "session_smart_router",
            "product": {
              "name": "session_smart_router",
              "product_id": "CSAFPID-1489354",
              "product_identification_helper": {
                "cpe": "cpe:2.3:h:juniper_networks:session_smart_router:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wan_assurance_router",
            "product": {
              "name": "wan_assurance_router",
              "product_id": "CSAFPID-1489355",
              "product_identification_helper": {
                "cpe": "cpe:2.3:h:juniper_networks:wan_assurance_router:*:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "juniper_networks"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2973",
      "cwe": {
        "id": "CWE-288",
        "name": "Authentication Bypass Using an Alternate Path or Channel"
      },
      "notes": [
        {
          "category": "other",
          "text": "Authentication Bypass Using an Alternate Path or Channel",
          "title": "CWE-288"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1489296",
          "CSAFPID-1489297",
          "CSAFPID-1489298",
          "CSAFPID-1489299",
          "CSAFPID-1489300",
          "CSAFPID-1489301",
          "CSAFPID-1489302",
          "CSAFPID-1489303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2973",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2973.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1489296",
            "CSAFPID-1489297",
            "CSAFPID-1489298",
            "CSAFPID-1489299",
            "CSAFPID-1489300",
            "CSAFPID-1489301",
            "CSAFPID-1489302",
            "CSAFPID-1489303"
          ]
        }
      ],
      "title": "CVE-2024-2973"
    }
  ]
}

GSD-2024-2973

Vulnerability from gsd - Updated: 2024-04-03 05:02

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-2973

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-2973"
      ],
      "id": "GSD-2024-2973",
      "modified": "2024-04-03T05:02:26.058505Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-2973",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

GHSA-JCWM-G9H6-HF43

Vulnerability from github – Published: 2024-06-27 21:32 – Updated: 2024-06-27 21:32

Details

No other Juniper Networks products or platforms are affected by this issue.

This issue affects:

Session Smart Router:

All versions before 5.6.15,
from 6.0 before 6.1.9-lts,
from 6.2 before 6.2.5-sts.

Session Smart Conductor:

All versions before 5.6.15,
from 6.0 before 6.1.9-lts,
from 6.2 before 6.2.5-sts.

WAN Assurance Router:

6.0 versions before 6.1.9-lts,
6.2 versions before 6.2.5-sts.

Severity ?

10.0 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-2973"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-288"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-06-27T21:15:15Z",
    "severity": "CRITICAL"
  },
  "details": "An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\nOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\n\n\n\n\nNo other Juniper Networks products or platforms are affected by this issue.\n\n\n\n\n\nThis issue affects:\n\nSession Smart Router:\u00a0\n\n\n\n  *  All versions before 5.6.15,\u00a0\n  *  from 6.0 before 6.1.9-lts,\u00a0\n  *  from 6.2 before 6.2.5-sts.\n\n\n\nSession Smart Conductor:\u00a0\n\n\n\n  *  All versions before 5.6.15,\u00a0\n  *  from 6.0 before 6.1.9-lts,\u00a0\n  *  from 6.2 before 6.2.5-sts.\u00a0\n\n\n\nWAN Assurance Router:\u00a0\n\n\n\n  *  6.0 versions before 6.1.9-lts,\u00a0\n  *  6.2 versions before 6.2.5-sts.",
  "id": "GHSA-jcwm-g9h6-hf43",
  "modified": "2024-06-27T21:32:08Z",
  "published": "2024-06-27T21:32:08Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2973"
    },
    {
      "type": "WEB",
      "url": "https://support.juniper.net/support/eol/software/ssr"
    },
    {
      "type": "WEB",
      "url": "https://supportportal.juniper.net/JSA83126"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-2973 (GCVE-0-2024-2973)

FKIE_CVE-2024-2973

CERTFR-2024-AVI-0525

Solutions

CERTFR-2024-AVI-0525

Solutions

NCSC-2024-0271

GSD-2024-2973

GHSA-JCWM-G9H6-HF43

Tags

Sightings

Nomenclature