PT-2024-5569 · Juniper Networks · Junos

Published 2024-06-25 · Updated 2024-07-11 · CVE-2024-39511

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 20.4R3-S10 Junos OS versions 21.2 prior to 21.2R3-S7 Junos OS versions 21.4 prior to 21.4R3-S6 Junos OS versions 22.1 prior to 22.1R3-S5 Junos OS versions 22.2 prior to 22.2R3-S3 Junos OS versions 22.3 prior to 22.3R3-S2 Junos OS versions 22.4 prior to 22.4R3-S1 Junos OS versions 23.2 prior to 23.2R2

Description An Improper Input Validation vulnerability in the 802.1X Authentication (dot1x) Daemon of Juniper Networks Junos OS allows a local, low-privileged attacker with access to the CLI to cause a Denial of Service (DoS). On running a specific operational dot1x command, the dot1x daemon crashes. An attacker can cause a sustained DoS condition by running this command repeatedly. When the crash occurs, the authentication status of any 802.1x clients is cleared, and any authorized dot1x port becomes unauthorized. The client cannot re-authenticate until the dot1x daemon restarts.

Recommendations For Junos OS versions prior to 20.4R3-S10, update to version 20.4R3-S10 or later. For Junos OS versions 21.2 prior to 21.2R3-S7, update to version 21.2R3-S7 or later. For Junos OS versions 21.4 prior to 21.4R3-S6, update to version 21.4R3-S6 or later. For Junos OS versions 22.1 prior to 22.1R3-S5, update to version 22.1R3-S5 or later. For Junos OS versions 22.2 prior to 22.2R3-S3, update to version 22.2R3-S3 or later. For Junos OS versions 22.3 prior to 22.3R3-S2, update to version 22.3R3-S2 or later. For Junos OS versions 22.4 prior to 22.4R3-S1, update to version 22.4R3-S1 or later. For Junos OS versions 23.2 prior to 23.2R2, update to version 23.2R2 or later.

Fix

DoS

Improper Resource Release

RCE

Weakness Enumeration

CWE-404

CWE-20

Related Identifiers

BDU:2024-06248

CVE-2024-39511

Affected Products

Junos

References · 9

• https://supportportal.juniper.net/JSA82976 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39511 · Security Note
• https://bdu.fstec.ru/vul/2024-06248 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39511 · Vendor Advisory
• https://vuldb.com/?id.271125 · Note
• https://twitter.com/VulmonFeeds/status/1811198666130026796 · Twitter Post
• https://t.me/cvedetector/617 · Telegram Post
• https://t.me/cvenotify/85734 · Telegram Post
• https://twitter.com/CVEnew/status/1811322677803753972 · Twitter Post