Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-39521


An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle command options in some cases, allowing users which execute specific CLI commands with a crafted set of parameters to escalate their privileges to root on shell level. This issue affects Junos OS Evolved:  * 21.1-EVO versions 21.1R1-EVO and later before 21.2R3-S8-EVO,  * 21.4-EVO versions before 21.4R3-S7-EVO, * 22.1-EVO versions before 22.1R3-S6-EVO,  * 22.2-EVO versions before 22.2R3-EVO, * 22.3-EVO versions before 22.3R2-EVO.


Published

2024-07-11T16:15:03.210

Last Modified

2024-11-21T09:27:55.090

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
  • Type: Primary
    CWE-78

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper junos_os_evolved < 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 21.4 Yes
Operating System juniper junos_os_evolved 22.2 Yes
Operating System juniper junos_os_evolved 22.2 Yes
Operating System juniper junos_os_evolved 22.2 Yes
Operating System juniper junos_os_evolved 22.2 Yes
Operating System juniper junos_os_evolved 22.2 Yes
Operating System juniper junos_os_evolved 22.3 Yes
Operating System juniper junos_os_evolved 22.3 Yes
Operating System juniper junos_os_evolved 22.3 Yes
Operating System juniper junos_os_evolved 22.3 Yes

References