CVE-2024-30406: Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials
A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials.
This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO.
This issue does not affect releases before 23.1R1-EVO.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30406?
CVE-2024-30406 is considered a high severity vulnerability due to its potential impact on user data confidentiality.
How do I fix CVE-2024-30406?
To fix CVE-2024-30406, upgrade the affected Junos OS Evolved ACX Series devices to a version that is beyond 23.2R2-EVO.
Who is affected by CVE-2024-30406?
CVE-2024-30406 affects local, authenticated users with high privileges on Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent.
What is the impact of CVE-2024-30406?
The impact of CVE-2024-30406 allows an attacker to read sensitive login credentials of other users.
What products are affected by CVE-2024-30406?
CVE-2024-30406 affects Juniper Networks Junos OS Evolved ACX Series devices that have the Paragon Active Assurance Test Agent installed.