PT-2024-3168 · Juniper Networks · Containerized Routing Protocol Daemon+1

Published 2024-04-10 · Updated 2024-05-16 · CVE-2024-30407

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Juniper Cloud Native Router (JCNR) versions prior to 23.4 Containerized Routing Protocol Daemon (cRPD) versions prior to 23.4R1

Description: The issue is related to the use of hard-coded cryptographic keys in Juniper Cloud Native Router (JCNR) and Containerized Routing Protocol Daemon (cRPD) products. This allows an attacker to perform Person-in-the-Middle (PitM) attacks, resulting in the complete compromise of the container. The presence of hard-coded SSH host keys on the container enables a PitM attacker to intercept SSH traffic without being detected.

Recommendations: For Juniper Cloud Native Router (JCNR) versions prior to 23.4, update to version 23.4 or later. For Containerized Routing Protocol Daemon (cRPD) versions prior to 23.4R1, update to version 23.4R1 or later. As a temporary workaround, consider restricting access to the SSH service until a patch is available.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

BDU:2024-03381

CVE-2024-30407

Affected Products

Containerized Routing Protocol Daemon

Juniper Cloud Native Router

References · 5

• https://supportportal.juniper.net/JSA79106 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03381 · Security Note
• https://supportportal.juniper.net/JSA79107 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30407 · Security Note
• https://first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N · Note