PT-2022-5224 · Juniper Networks · Junos Evolved

Published 2022-10-12 · Updated 2022-10-20 · CVE-2022-22239

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S5-EVO Juniper Networks Junos OS Evolved version 21.1-EVO prior to 21.1R3-EVO Juniper Networks Junos OS Evolved version 21.2-EVO prior to 21.2R2-S1-EVO Juniper Networks Junos OS Evolved version 21.2-EVO prior to 21.2R3-EVO Juniper Networks Junos OS Evolved version 21.3-EVO prior to 21.3R2-EVO

Description The issue is related to insecure privilege management in the Management Daemon (MGD) of Juniper Networks Junos OS Evolved. Exploitation of this issue may allow an attacker to escalate their privileges. A locally authenticated attacker with low privileges can potentially escalate their privileges on the device and remote systems. This can be achieved through access to the ssh operational command, allowing the attacker to escalate their privileges on the system to root, or potentially on a remote system to root with user interaction on the local device.

Recommendations For versions prior to 20.4R3-S5-EVO, update to 20.4R3-S5-EVO or later. For version 21.1-EVO, update to 21.1R3-EVO or later. For version 21.2-EVO, update to 21.2R2-S1-EVO, 21.2R3-EVO or later. For version 21.3-EVO, update to 21.3R2-EVO or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-250

Related Identifiers

BDU:2022-06485

CVE-2022-22239

Affected Products

Junos Evolved

References · 5

• https://osv.dev/vulnerability/CVE-2022-22239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22239 · Security Note
• https://bdu.fstec.ru/vul/2022-06485 · Security Note
• https://kb.juniper.net/JSA69895 · Vendor Advisory
• https://vuldb.com/ru/?id.211100 · Note