CVE-2023-28983CWE-78

Junos OS Evolved: Shell Injection vulnerability in the gNOI server

High · published April 17, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4 version 21.4R1-EVO and later versions prior to 22.1R1-EVO.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01482 · 73.8th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2023-04-17T00:00Z
EPSS history
Timeline
  • 17 APR 00:00Z
    Junos OS Evolved: Shell Injection vulnerability in the gNOI server
    cvelistv5