PT-2022-6216 · Juniper Networks · Junos

Published 2022-07-13 · Updated 2022-07-29 · CVE-2022-22221

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series and EX Series versions prior to 19.2R1-S9, 19.2R3-S5 Juniper Networks Junos OS on SRX Series and EX Series version 19.3 prior to 19.3R3-S6 Juniper Networks Junos OS on SRX Series and EX Series version 19.4 prior to 19.4R3-S8 Juniper Networks Junos OS on SRX Series and EX Series version 20.1 prior to 20.1R3-S4 Juniper Networks Junos OS on SRX Series and EX Series version 20.2 prior to 20.2R3-S4 Juniper Networks Junos OS on SRX Series and EX Series version 20.3 prior to 20.3R3-S3 Juniper Networks Junos OS on SRX Series and EX Series version 20.4 prior to 20.4R3-S2, 20.4R3-S3 Juniper Networks Junos OS on SRX Series and EX Series version 21.1 prior to 21.1R3-S1 Juniper Networks Junos OS on SRX Series and EX Series version 21.2 prior to 21.2R2-S2, 21.2R3 Juniper Networks Junos OS on SRX Series and EX Series version 21.3 prior to 21.3R2, 21.3R3 Juniper Networks Junos OS on SRX Series and EX Series version 21.4 prior to 21.4R1-S1, 21.4R2

Description The issue is related to an Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS on SRX Series and EX Series. This vulnerability allows a locally authenticated attacker with low privileges to take full control over the device. The attacker needs to be able to execute any of the "request ..." or "show system download ..." commands.

Recommendations For Juniper Networks Junos OS on SRX Series and EX Series versions prior to 19.2R1-S9, 19.2R3-S5, update to version 19.2R1-S9 or 19.2R3-S5 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 19.3 prior to 19.3R3-S6, update to version 19.3R3-S6 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 19.4 prior to 19.4R3-S8, update to version 19.4R3-S8 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 20.1 prior to 20.1R3-S4, update to version 20.1R3-S4 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 20.2 prior to 20.2R3-S4, update to version 20.2R3-S4 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 20.3 prior to 20.3R3-S3, update to version 20.3R3-S3 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 20.4 prior to 20.4R3-S2, 20.4R3-S3, update to version 20.4R3-S2, 20.4R3-S3 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 21.1 prior to 21.1R3-S1, update to version 21.1R3-S1 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 21.2 prior to 21.2R2-S2, 21.2R3, update to version 21.2R2-S2, 21.2R3 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 21.3 prior to 21.3R2, 21.3R3, update to version 21.3R2, 21.3R3 or later. For Juniper Networks Junos OS on SRX Series and EX Series version 21.4 prior to 21.4R1-S1, 21.4R2, update to version 21.4R1-S1, 21.4R2 or later. As a temporary workaround, consider restricting access to the "request ..." and "show system download ..." commands until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-00484

CVE-2022-22221

Affected Products

Junos

References · 5

• https://kb.juniper.net/JSA69725 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22221 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22221 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00484 · Security Note
• https://t.me/cibsecurity/46672 · Telegram Post