CVE-2024-21591CWE-787

Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution

Critical · published January 12, 2024

CVSS v3.1
9.8
EPSS
18%
Percentile
97.1
In the wild
Unconfirmed
What it is

🚨 An insecure function allows attackers to overwrite memory, which means they could potentially gain complete control of your device! 🔥 Think of it like a hotel with a faulty check-in system. If the front desk forgets to verify identities, any guest could waltz into a room and take over the entire floor! This vulnerability is absolutely devastating! An attacker could not only cause a Denial of Service (DoS) but also execute remote code, gaining root privileges. This means they could manipulate the device as they wish, leading to critical security breaches.

Put simply

Think of it like a hotel with a faulty check-in system. If the front desk forgets to verify identities, any guest could waltz into a room and take over the entire floor! The Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS allows unauthenticated attackers to overwrite arbitrary memory, putting devices at risk of DoS or RCE.

What to do

This vulnerability is absolutely devastating! An attacker could not only cause a Denial of Service (DoS) but also execute remote code, gaining root privileges. This means they could manipulate the device as they wish, leading to critical security breaches. Immediately patch any affected Junos OS versions—upgrade to 20.4R3-S9 or later for older versions, and ensure 21.2R3-S7 or newer for the 21.x series. Conduct regular audits to confirm your devices are up to date. You've got this! Follow these steps to secure your network and achieve hero status! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.17668 · 97.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-01-12T00:52Z
EPSS history
Timeline
  • 12 JAN 00:52Z
    Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution
    cvelistv5