Description
A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges can gain direct access to the installed FPCs as a high privileged user, which can potentially lead to a full compromise of the affected component. This issue affects Junos OS Evolved on PTX10004, PTX10008, PTX100016, with JNP10K-LC1201 or JNP10K-LC1202: * All versions before 21.2R3-S8-EVO, * 21.4-EVO versions before 21.4R3-S7-EVO, * 22.2-EVO versions before 22.2R3-S4-EVO, * 22.3-EVO versions before 22.3R3-S3-EVO, * 22.4-EVO versions before 22.4R3-S2-EVO, * 23.2-EVO versions before 23.2R2-EVO.
CVSS breakdown
CVSS 4.0
Attack Vector
Local
Attack Complexity
Low
Attack Requirements
None
Privileges Required
Low
User Interaction
None
Confidentiality (Vulnerable System)
High
Integrity (Vulnerable System)
High
Availability (Vulnerable System)
High
Confidentiality (Subsequent System)
None
Integrity (Subsequent System)
None
Availability (Subsequent System)
Low
AU
Y
R
Unchanged
RE
M
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Juniper / junos22.4 – 22.4
- Juniper / junos23.2 – 23.2
- Juniper / junos23.2 – 23.2
- Juniper / junos23.2 – 23.2
- Juniper / junos22.4 – 22.4
- Juniper / junos22.4 – 22.4
- Juniper / junos21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.2 – 21.2
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos21.4 – 21.4
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.2 – 22.2
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.3 – 22.3
- Juniper / junos22.4 – 22.4
- Juniper / junos22.4 – 22.4
- Juniper / junos22.4 – 22.4
- Juniper / junos22.4 – 22.4
- Juniper / junos22.4 – 22.4
- Juniper / junos_os_evolved23.2 – 23.2
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper / junos_os_evolved23.2 – 23.2
- Juniper / junos_os_evolved23.2 – 23.2
- Juniper / junos_os_evolved23.2 – 23.2
- Juniper / junos_os_evolved21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.2 – 21.2
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved21.4 – 21.4
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.2 – 22.2
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.3 – 22.3
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper / junos_os_evolved22.4 – 22.4
- Juniper Networks / Junos OS Evolved23.2-EVO – 23.2R2-EVO
- Juniper Networks / Junos OS Evolved22.4-EVO – 22.4R3-S2-EVO
- Juniper Networks / Junos OS Evolved22.3-EVO – 22.3R3-S3-EVO
- Juniper Networks / Junos OS Evolved22.2-EVO – 22.2R3-S4-EVO
- Juniper Networks / Junos OS Evolved21.4-EVO – 21.4R3-S7-EVO
- Juniper Networks / Junos OS Evolved0 – 21.2R3-S8-EVO
References
Updated 16m ago · 8 sources