CVE-2022-22251
High
Description
On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Juniper Junos
PublishedOct 18, 2022
First seenOct 18, 2022
Weakness typeCWE-257CWE-257CWE-275CWE-275
How to fix
Update
- juniper junos21.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | 20.2 ≤ v < 21.2 | 21.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.