What is the severity of CVE-2022-22241?

CVE-2022-22241 has a medium severity rating, allowing unauthorized access to data in the Juniper Networks Junos OS J-Web component.

How do I fix CVE-2022-22241?

To fix CVE-2022-22241, apply the latest security patches available for the affected Junos OS versions as recommended by the vendor.

Which versions of Junos OS are affected by CVE-2022-22241?

CVE-2022-22241 affects Junos OS versions up to but not including 19.2 and versions 19.3 to 22.1.

What type of attack does CVE-2022-22241 allow?

CVE-2022-22241 allows unauthenticated attackers to potentially execute deserialization attacks via crafted POST requests.

Can CVE-2022-22241 be exploited remotely?

Yes, CVE-2022-22241 can be exploited remotely due to improper input validation in the J-Web component.

Vulnerability/
CVE-2022-22241

critical

9.8

CWE

502 20

18/10/2022

16/9/2024

CVE-2022-22241: Junos OS: Vulnerability in J-Web may allow deserialization without authentication

First published: Tue Oct 18 2022(Updated: )

An Improper Input Validation vulnerability in the J-Web component of Juniper Networks Junos OS may allow an unauthenticated attacker to access data without proper authorization. Utilizing a crafted POST request, deserialization may occur which could lead to unauthorized local file access or the ability to execute arbitrary commands. This issue affects Juniper Networks Junos OS: all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S7, 19.4R3-S9; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S2; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R2-S2, 21.3R3; 21.4 versions prior to 21.4R1-S2, 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R1-S1, 22.1R2.

Credit: sirt@juniper.net

Affected Software	Affected Version	How to fix
Junos OS Evolved	<19.1
Junos OS Evolved	=19.1
Junos OS Evolved	=19.1-r1
Junos OS Evolved	=19.1-r1-s1
Junos OS Evolved	=19.1-r1-s2
Junos OS Evolved	=19.1-r1-s3
Junos OS Evolved	=19.1-r1-s4
Junos OS Evolved	=19.1-r1-s5
Junos OS Evolved	=19.1-r1-s6
Junos OS Evolved	=19.1-r2
Junos OS Evolved	=19.1-r2-s1
Junos OS Evolved	=19.1-r2-s2
Junos OS Evolved	=19.1-r2-s3
Junos OS Evolved	=19.1-r3
Junos OS Evolved	=19.1-r3-s1
Junos OS Evolved	=19.1-r3-s2
Junos OS Evolved	=19.1-r3-s3
Junos OS Evolved	=19.1-r3-s4
Junos OS Evolved	=19.1-r3-s5
Junos OS Evolved	=19.1-r3-s6
Junos OS Evolved	=19.1-r3-s7
Junos OS Evolved	=19.1-r3-s8
Junos OS Evolved	=19.2
Junos OS Evolved	=19.2-r1
Junos OS Evolved	=19.2-r1-s1
Junos OS Evolved	=19.2-r1-s2
Junos OS Evolved	=19.2-r1-s3
Junos OS Evolved	=19.2-r1-s4
Junos OS Evolved	=19.2-r1-s5
Junos OS Evolved	=19.2-r1-s6
Junos OS Evolved	=19.2-r1-s7
Junos OS Evolved	=19.2-r1-s8
Junos OS Evolved	=19.2-r1-s9
Junos OS Evolved	=19.2-r2
Junos OS Evolved	=19.2-r2-s1
Junos OS Evolved	=19.2-r3
Junos OS Evolved	=19.2-r3-s1
Junos OS Evolved	=19.2-r3-s2
Junos OS Evolved	=19.2-r3-s3
Junos OS Evolved	=19.2-r3-s4
Junos OS Evolved	=19.2-r3-s5
Junos OS Evolved	=19.3
Junos OS Evolved	=19.3-r1
Junos OS Evolved	=19.3-r1-s1
Junos OS Evolved	=19.3-r2
Junos OS Evolved	=19.3-r2-s1
Junos OS Evolved	=19.3-r2-s2
Junos OS Evolved	=19.3-r2-s3
Junos OS Evolved	=19.3-r2-s4
Junos OS Evolved	=19.3-r2-s5
Junos OS Evolved	=19.3-r2-s6
Junos OS Evolved	=19.3-r3
Junos OS Evolved	=19.3-r3-s1
Junos OS Evolved	=19.3-r3-s2
Junos OS Evolved	=19.3-r3-s3
Junos OS Evolved	=19.3-r3-s4
Junos OS Evolved	=19.3-r3-s5
Junos OS Evolved	=19.3-r3-s6
Junos OS Evolved	=19.4
Junos OS Evolved	=19.4-r1
Junos OS Evolved	=19.4-r1-s1
Junos OS Evolved	=19.4-r1-s2
Junos OS Evolved	=19.4-r1-s3
Junos OS Evolved	=19.4-r1-s4
Junos OS Evolved	=19.4-r2
Junos OS Evolved	=19.4-r2-s1
Junos OS Evolved	=19.4-r2-s2
Junos OS Evolved	=19.4-r2-s3
Junos OS Evolved	=19.4-r2-s4
Junos OS Evolved	=19.4-r2-s5
Junos OS Evolved	=19.4-r2-s6
Junos OS Evolved	=19.4-r3
Junos OS Evolved	=19.4-r3-s1
Junos OS Evolved	=19.4-r3-s2
Junos OS Evolved	=19.4-r3-s3
Junos OS Evolved	=19.4-r3-s4
Junos OS Evolved	=19.4-r3-s5
Junos OS Evolved	=19.4-r3-s6
Junos OS Evolved	=19.4-r3-s7
Junos OS Evolved	=19.4-r3-s8
Junos OS Evolved	=20.1
Junos OS Evolved	=20.1-r1
Junos OS Evolved	=20.1-r1-s1
Junos OS Evolved	=20.1-r1-s2
Junos OS Evolved	=20.1-r1-s3
Junos OS Evolved	=20.1-r1-s4
Junos OS Evolved	=20.1-r2
Junos OS Evolved	=20.1-r2-s1
Junos OS Evolved	=20.1-r2-s2
Junos OS Evolved	=20.1-r3
Junos OS Evolved	=20.1-r3-s1
Junos OS Evolved	=20.1-r3-s2
Junos OS Evolved	=20.1-r3-s3
Junos OS Evolved	=20.1-r3-s4
Junos OS Evolved	=20.2
Junos OS Evolved	=20.2-r1
Junos OS Evolved	=20.2-r1-s1
Junos OS Evolved	=20.2-r1-s2
Junos OS Evolved	=20.2-r1-s3
Junos OS Evolved	=20.2-r2
Junos OS Evolved	=20.2-r2-s1
Junos OS Evolved	=20.2-r2-s2
Junos OS Evolved	=20.2-r2-s3
Junos OS Evolved	=20.2-r3
Junos OS Evolved	=20.2-r3-s1
Junos OS Evolved	=20.2-r3-s2
Junos OS Evolved	=20.2-r3-s3
Junos OS Evolved	=20.2-r3-s4
Junos OS Evolved	=20.3
Junos OS Evolved	=20.3-r1
Junos OS Evolved	=20.3-r1-s1
Junos OS Evolved	=20.3-r1-s2
Junos OS Evolved	=20.3-r2
Junos OS Evolved	=20.3-r2-s1
Junos OS Evolved	=20.3-r3
Junos OS Evolved	=20.3-r3-s1
Junos OS Evolved	=20.3-r3-s2
Junos OS Evolved	=20.3-r3-s3
Junos OS Evolved	=20.4
Junos OS Evolved	=20.4-r1
Junos OS Evolved	=20.4-r1-s1
Junos OS Evolved	=20.4-r2
Junos OS Evolved	=20.4-r2-s1
Junos OS Evolved	=20.4-r2-s2
Junos OS Evolved	=20.4-r3
Junos OS Evolved	=20.4-r3-s1
Junos OS Evolved	=20.4-r3-s2
Junos OS Evolved	=20.4-r3-s3
Junos OS Evolved	=21.1
Junos OS Evolved	=21.1-r1
Junos OS Evolved	=21.1-r1-s1
Junos OS Evolved	=21.1-r2
Junos OS Evolved	=21.1-r2-s1
Junos OS Evolved	=21.1-r2-s2
Junos OS Evolved	=21.1-r3
Junos OS Evolved	=21.1-r3-s1
Junos OS Evolved	=21.2
Junos OS Evolved	=21.2-r1
Junos OS Evolved	=21.2-r1-s1
Junos OS Evolved	=21.2-r1-s2
Junos OS Evolved	=21.2-r2
Junos OS Evolved	=21.2-r2-s1
Junos OS Evolved	=21.2-r2-s2
Junos OS Evolved	=21.2-r3
Junos OS Evolved	=21.3
Junos OS Evolved	=21.3-r1
Junos OS Evolved	=21.3-r1-s1
Junos OS Evolved	=21.3-r1-s2
Junos OS Evolved	=21.3-r2
Junos OS Evolved	=21.3-r2-s1
Junos OS Evolved	=21.3-r2-s2
Junos OS Evolved	=21.4
Junos OS Evolved	=21.4-r1
Junos OS Evolved	=21.4-r1-s1
Junos OS Evolved	=21.4-r1-s2
Junos OS Evolved	=21.4-r2
Junos OS Evolved	=21.4-r2-s1
Junos OS Evolved	=21.4-r2-s2
Junos OS Evolved	=22.1-r1
Junos OS Evolved	=22.1-r1-s1
Junos OS Evolved	=22.1-r1-s2

Remedy

The following software releases have been updated to resolve this specific issue: 19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R2-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.2R3-S1, 21.3R2-S2, 21.3R3, 21.4R1-S2, 21.4R2-S1, 21.4R3, 22.1R1-S1, 22.1R2, 22.2R1, and all subsequent releases.

Never miss a vulnerability like this again

Reference Links

https://kb.juniper.net/JSA69899

Frequently Asked Questions

What is the severity of CVE-2022-22241?
CVE-2022-22241 has a medium severity rating, allowing unauthorized access to data in the Juniper Networks Junos OS J-Web component.
How do I fix CVE-2022-22241?
To fix CVE-2022-22241, apply the latest security patches available for the affected Junos OS versions as recommended by the vendor.
Which versions of Junos OS are affected by CVE-2022-22241?
CVE-2022-22241 affects Junos OS versions up to but not including 19.2 and versions 19.3 to 22.1.
What type of attack does CVE-2022-22241 allow?
CVE-2022-22241 allows unauthenticated attackers to potentially execute deserialization attacks via crafted POST requests.
Can CVE-2022-22241 be exploited remotely?
Yes, CVE-2022-22241 can be exploited remotely due to improper input validation in the J-Web component.

agent/type
agent/severity
agent/references
agent/title
agent/author
agent/weakness
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/remedy
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/juniper
canonical/junos os evolved
version/junos os evolved/19.1
version/junos os evolved/19.1-r1
version/junos os evolved/19.1-r1-s1
version/junos os evolved/19.1-r1-s2
version/junos os evolved/19.1-r1-s3
version/junos os evolved/19.1-r1-s4
version/junos os evolved/19.1-r1-s5
version/junos os evolved/19.1-r1-s6
version/junos os evolved/19.1-r2
version/junos os evolved/19.1-r2-s1
version/junos os evolved/19.1-r2-s2
version/junos os evolved/19.1-r2-s3
version/junos os evolved/19.1-r3
version/junos os evolved/19.1-r3-s1
version/junos os evolved/19.1-r3-s2
version/junos os evolved/19.1-r3-s3
version/junos os evolved/19.1-r3-s4
version/junos os evolved/19.1-r3-s5
version/junos os evolved/19.1-r3-s6
version/junos os evolved/19.1-r3-s7
version/junos os evolved/19.1-r3-s8
version/junos os evolved/19.2
version/junos os evolved/19.2-r1
version/junos os evolved/19.2-r1-s1
version/junos os evolved/19.2-r1-s2
version/junos os evolved/19.2-r1-s3
version/junos os evolved/19.2-r1-s4
version/junos os evolved/19.2-r1-s5
version/junos os evolved/19.2-r1-s6
version/junos os evolved/19.2-r1-s7
version/junos os evolved/19.2-r1-s8
version/junos os evolved/19.2-r1-s9
version/junos os evolved/19.2-r2
version/junos os evolved/19.2-r2-s1
version/junos os evolved/19.2-r3
version/junos os evolved/19.2-r3-s1
version/junos os evolved/19.2-r3-s2
version/junos os evolved/19.2-r3-s3
version/junos os evolved/19.2-r3-s4
version/junos os evolved/19.2-r3-s5
version/junos os evolved/19.3
version/junos os evolved/19.3-r1
version/junos os evolved/19.3-r1-s1
version/junos os evolved/19.3-r2
version/junos os evolved/19.3-r2-s1
version/junos os evolved/19.3-r2-s2
version/junos os evolved/19.3-r2-s3
version/junos os evolved/19.3-r2-s4
version/junos os evolved/19.3-r2-s5
version/junos os evolved/19.3-r2-s6
version/junos os evolved/19.3-r3
version/junos os evolved/19.3-r3-s1
version/junos os evolved/19.3-r3-s2
version/junos os evolved/19.3-r3-s3
version/junos os evolved/19.3-r3-s4
version/junos os evolved/19.3-r3-s5
version/junos os evolved/19.3-r3-s6
version/junos os evolved/19.4
version/junos os evolved/19.4-r1
version/junos os evolved/19.4-r1-s1
version/junos os evolved/19.4-r1-s2
version/junos os evolved/19.4-r1-s3
version/junos os evolved/19.4-r1-s4
version/junos os evolved/19.4-r2
version/junos os evolved/19.4-r2-s1
version/junos os evolved/19.4-r2-s2
version/junos os evolved/19.4-r2-s3
version/junos os evolved/19.4-r2-s4
version/junos os evolved/19.4-r2-s5
version/junos os evolved/19.4-r2-s6
version/junos os evolved/19.4-r3
version/junos os evolved/19.4-r3-s1
version/junos os evolved/19.4-r3-s2
version/junos os evolved/19.4-r3-s3
version/junos os evolved/19.4-r3-s4
version/junos os evolved/19.4-r3-s5
version/junos os evolved/19.4-r3-s6
version/junos os evolved/19.4-r3-s7
version/junos os evolved/19.4-r3-s8
version/junos os evolved/20.1
version/junos os evolved/20.1-r1
version/junos os evolved/20.1-r1-s1
version/junos os evolved/20.1-r1-s2
version/junos os evolved/20.1-r1-s3
version/junos os evolved/20.1-r1-s4
version/junos os evolved/20.1-r2
version/junos os evolved/20.1-r2-s1
version/junos os evolved/20.1-r2-s2
version/junos os evolved/20.1-r3
version/junos os evolved/20.1-r3-s1
version/junos os evolved/20.1-r3-s2
version/junos os evolved/20.1-r3-s3
version/junos os evolved/20.1-r3-s4
version/junos os evolved/20.2
version/junos os evolved/20.2-r1
version/junos os evolved/20.2-r1-s1
version/junos os evolved/20.2-r1-s2
version/junos os evolved/20.2-r1-s3
version/junos os evolved/20.2-r2
version/junos os evolved/20.2-r2-s1
version/junos os evolved/20.2-r2-s2
version/junos os evolved/20.2-r2-s3
version/junos os evolved/20.2-r3
version/junos os evolved/20.2-r3-s1
version/junos os evolved/20.2-r3-s2
version/junos os evolved/20.2-r3-s3
version/junos os evolved/20.2-r3-s4
version/junos os evolved/20.3
version/junos os evolved/20.3-r1
version/junos os evolved/20.3-r1-s1
version/junos os evolved/20.3-r1-s2
version/junos os evolved/20.3-r2
version/junos os evolved/20.3-r2-s1
version/junos os evolved/20.3-r3
version/junos os evolved/20.3-r3-s1
version/junos os evolved/20.3-r3-s2
version/junos os evolved/20.3-r3-s3
version/junos os evolved/20.4
version/junos os evolved/20.4-r1
version/junos os evolved/20.4-r1-s1
version/junos os evolved/20.4-r2
version/junos os evolved/20.4-r2-s1
version/junos os evolved/20.4-r2-s2
version/junos os evolved/20.4-r3
version/junos os evolved/20.4-r3-s1
version/junos os evolved/20.4-r3-s2
version/junos os evolved/20.4-r3-s3
version/junos os evolved/21.1
version/junos os evolved/21.1-r1
version/junos os evolved/21.1-r1-s1
version/junos os evolved/21.1-r2
version/junos os evolved/21.1-r2-s1
version/junos os evolved/21.1-r2-s2
version/junos os evolved/21.1-r3
version/junos os evolved/21.1-r3-s1
version/junos os evolved/21.2
version/junos os evolved/21.2-r1
version/junos os evolved/21.2-r1-s1
version/junos os evolved/21.2-r1-s2
version/junos os evolved/21.2-r2
version/junos os evolved/21.2-r2-s1
version/junos os evolved/21.2-r2-s2
version/junos os evolved/21.2-r3
version/junos os evolved/21.3
version/junos os evolved/21.3-r1
version/junos os evolved/21.3-r1-s1
version/junos os evolved/21.3-r1-s2
version/junos os evolved/21.3-r2
version/junos os evolved/21.3-r2-s1
version/junos os evolved/21.3-r2-s2
version/junos os evolved/21.4
version/junos os evolved/21.4-r1
version/junos os evolved/21.4-r1-s1
version/junos os evolved/21.4-r1-s2
version/junos os evolved/21.4-r2
version/junos os evolved/21.4-r2-s1
version/junos os evolved/21.4-r2-s2
version/junos os evolved/22.1-r1
version/junos os evolved/22.1-r1-s1
version/junos os evolved/22.1-r1-s2