CVE-2024-47495

HIGH EPSS 11.0%

Published Oct 11, 20241y ago · Modified Jun 17, 20262w ago

8.4 CVSS 4.0

High

Published Oct 11, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

An Authorization Bypass Through User-Controlled Key vulnerability allows a locally authenticated attacker with shell access to gain full control of the device when Dual Routing Engines (REs) are in use on Juniper Networks Junos OS Evolved devices. This issue affects: Juniper Networks Junos OS Evolved with dual-REs: * All versions before 21.2R3-S8-EVO, * from 21.4-EVO before 21.4R3-S8-EVO, * from 22.2-EVO before 22.2R3-S4-EVO, * from 22.3-EVO before 22.3R3-S4-EVO, * from 22.4-EVO before 22.4R3-S3-EVO, * from 23.2-EVO before 23.2R2-S1-EVO, * from 23.4-EVO before 23.4R2-S1-EVO. This issue does not affect Juniper Networks Junos OS.

CVSS Details

Base Score

8.4

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:L/U:Green

Attack Vector Local

Attack Complexity Low

Privileges Required High

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

11.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-639

Affected Products 73

Vendor	Product	Version	Range
juniper	junos_os_evolved	*	<21.2
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.2	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.4	any
juniper	junos_os_evolved	23.4	any
juniper	junos_os_evolved	23.4	any
juniper	junos_os_evolved	23.4	any
juniper	junos_os_evolved	23.4	any

References 1

kb.juniper.net https://kb.juniper.net/JSA88122

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.