CVE-2024-30407
Description
The Use of a Hard-coded Cryptographic Key vulnerability in Juniper Networks Juniper Cloud Native Router (JCNR) and containerized routing Protocol Deamon (cRPD) products allows an attacker to perform Person-in-the-Middle (PitM) attacks which results in complete compromise of the container. Due to hardcoded SSH host keys being present on the container, a PitM attacker can intercept SSH traffic without being detected. This issue affects Juniper Networks JCNR: * All versions before 23.4. This issue affects Juniper Networks cRPD: * All versions before 23.4R1.
How to fix
- Juniper Networks, Inc. cRPD23.4R1 or later
- Juniper Networks, Inc. Juniper Cloud Native Router (JCNR)23.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Juniper Networks, Inc. cRPD | v < 23.4R1 | 23.4R1 |
| Juniper Networks, Inc. Juniper Cloud Native Router (JCNR) | v < 23.4 | 23.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.