CVE-2024-39546: Junos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalation
First published: Thu Jul 11 2024(Updated: )
A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local attacker to modify certain files, allowing the attacker to cause any command to execute with root privileges leading to privilege escalation ultimately compromising the system. This issue affects Junos OS Evolved: * All versions prior to 21.2R3-S8-EVO, * 21.4 versions prior to 21.4R3-S6-EVO, * 22.1 versions prior to 22.1R3-S5-EVO, * 22.2 versions prior to 22.2R3-S3-EVO, * 22.3 versions prior to 22.3R3-S3-EVO, * 22.4 versions prior to 22.4R3-EVO, * 23.2 versions prior to 23.2R2-EVO.
Credit: sirt@juniper.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper Networks Junos OS | <21.2R3-S8-EVO<21.4R3-S6-EVO<22.1R3-S5-EVO<22.2R3-S3-EVO<22.3R3-S3-EVO<22.4R3-EVO<23.2R2-EVO |
Remedy
The following software releases have been updated to resolve this specific issue: Junos OS Evolved: 21.4R3-S6-EVO, 22.1R3-S5-EVO, 22.2R3-S3-EVO, 22.4R3-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-39546?
CVE-2024-39546 is considered a high severity vulnerability due to its potential for unauthorized file modification and execution of commands with root privileges.
How do I fix CVE-2024-39546?
To fix CVE-2024-39546, update the Junos OS Evolved to a version that addresses this vulnerability as specified in the vendor's advisory.
Which versions of Junos OS Evolved are affected by CVE-2024-39546?
CVE-2024-39546 affects Junos OS Evolved versions up to and including 23.2R2-EVO.
Who can exploit the CVE-2024-39546 vulnerability?
An authenticated, low-privilege local attacker can exploit CVE-2024-39546 to modify files and execute commands with elevated privileges.
What type of vulnerability is CVE-2024-39546?
CVE-2024-39546 is a missing authorization vulnerability found in the Socket Intercept command file interface.
- agent/remedy
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/juniper networks
- canonical/juniper networks junos os