CVE-2023-28966: Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root
An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute commands as root. The issue is caused by improper file and directory permissions on certain system files, allowing an attacker with access to these files and folders to inject CLI commands as root. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S5-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-28966?
CVE-2023-28966 is an Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved that allows a low-privileged local attacker with shell access to modify existing files or execute commands as root.
How does CVE-2023-28966 affect Juniper Networks Junos OS Evolved?
CVE-2023-28966 affects Juniper Networks Junos OS Evolved by allowing a low-privileged local attacker with shell access to modify existing files or execute commands as root.
What is the severity of CVE-2023-28966?
The severity of CVE-2023-28966 is high with a severity value of 7.8.
How do I fix CVE-2023-28966?
To fix CVE-2023-28966, it is recommended to apply the necessary patches or updates provided by Juniper Networks Junos OS Evolved.
Where can I find more information about CVE-2023-28966?
You can find more information about CVE-2023-28966 on the Juniper Networks Support Portal at the following link: [https://supportportal.juniper.net/JSA70590](https://supportportal.juniper.net/JSA70590).