PT-2023-3001 · Juniper Networks · Junos Evolved

Published 2023-04-12 · Updated 2023-04-27 · CVE-2023-28966

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S5-EVO Juniper Networks Junos OS Evolved version 21.2 versions prior to 21.2R3-EVO Juniper Networks Junos OS Evolved version 21.3 versions prior to 21.3R2-EVO

Description The issue is caused by improper file and directory permissions on certain system files, allowing an attacker with access to these files and folders to inject CLI commands as root. A low-privileged local attacker with shell access can modify existing files or execute commands as root.

Recommendations For versions prior to 20.4R3-S5-EVO, update to version 20.4R3-S5-EVO or later. For version 21.2, update to version 21.2R3-EVO or later. For version 21.3, update to version 21.3R2-EVO or later. As a temporary workaround, consider restricting access to system files and folders to minimize the risk of exploitation.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2023-03031

CVE-2023-28966

Affected Products

Junos Evolved

References · 6

• https://supportportal.juniper.net/JSA70590 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/692588/?sphrase_id=45523 · Security Note
• https://bdu.fstec.ru/vul/2023-03031 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-28966 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28966 · Vendor Advisory
• https://t.me/cibsecurity/62328 · Telegram Post