2024-008: Critical Vulnerabilities in Junos OS

2024-008: Critical Vulnerabilities in Junos OS ↗ source

January 15, 2024 CERT-EU Advisory

Source: https://cert.europa.eu/publications/security-advisories/2024-008/

Summary

While Juniper SIRT is not aware of any malicious exploitation of this vulnerability, it is recommended upgrading as soon as possible. The vulnerability CVE-2024-21591 , with a CVSS score of 9.8, is due to an insecure function allowing an attacker to overwrite arbitrary memory. It allows a network-based attacker to cause a Denial of Service (DoS), or Remote Code Execution (RCE) and obtain root privileges on the To be vulnerable, at least one of the following configurations needs to be used on the device: This issue affects Juniper Networks Junos OS SRX Series and EX Series: It is strongly recommended upgrading all Junos OS to one of the fixed versions (or newer).

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVE	CVSS	Affected
CVE-2024-21591	9.8 Critical	Juniper Networks Junos OS An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based atta…

Extracted from the publication text. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Juniper 8 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.