PT-2024-2871 · Juniper Networks · Paragon Active Assurance Control Center

Published 2024-04-10 · Updated 2024-05-16 · CVE-2024-30381

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Paragon Active Assurance Control Center versions 4.1.0 through 4.2.0

Description The issue allows a network-adjacent attacker with root access to a Test Agent Appliance to access sensitive information about downstream devices. The "netrounds-probe-login" daemon exposes functions where the Test Agent Appliance pushes interface state/config, and the remote service accidentally exposes an internal database object that can be used for direct database access on the Paragon Active Assurance Control Center.

Recommendations For versions 4.1.0 and 4.2.0, consider disabling the probe serviced daemon as a temporary workaround until a patch is available. Restrict access to the internal database object to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2024-03032

CVE-2024-30381

Affected Products

Paragon Active Assurance Control Center

References · 9

• https://bdu.fstec.ru/vul/2024-03032 · Security Note
• https://osv.dev/vulnerability/CVE-2024-30381 · Vendor Advisory
• https://first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H · Vendor Advisory
• https://supportportal.juniper.net/JSA79173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30381 · Security Note
• https://t.me/cvenotify/80062 · Telegram Post
• https://twitter.com/RsSI47041968/status/1779919253380145637 · Twitter Post
• https://t.me/cvenotify/80069 · Telegram Post
• https://twitter.com/CCBalert/status/1786338231929241711 · Twitter Post