CVE-2023-44187 Junos OS Evolved: 'file copy' CLI command can disclose password to shell users

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

CVE-2023-44187 Junos OS Evolved: 'file copy' CLI command can disclose password to shell users

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

CVE-2023-44187

The CVE affects Juniper Junos OS Evolved: the 'file copy' CLI command can disclose passwords entered on the command line to a local attacker with shell access. Affected versions require upgrading to fixed releases: 20.4R3-S7-EVO or later; 21.1R1-EVO to 21.2R3-S5-EVO or later; 21.2R3-S5-EVO or lat...

CVE-2023-44186 Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor

An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service DoS. Continued receipt and...

CVE-2023-44186

CVE-2023-44186 concerns Juniper Networks Junos OS and Junos OS Evolved. The issue is an Improper Handling of Exceptional Conditions in AS PATH processing that allows a BGP update with a very long AS PATH of 4-byte ASes to trigger a Denial of Service when NSR is enabled and advertising to a non-4-...

CVE-2023-44186 Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor

An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service DoS. Continued receipt and...

CVE-2023-44190: Origin Validation Error

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016 devices allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded ...

CVE-2023-44189: Origin Validation Error

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to...

PT-2023-6154 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.4R3-S4 Juniper Networks Junos OS versions prior to 22.1R3-S3 Juniper Networks Junos OS versions prior to 22.2R3-S2 Juniper Networks Junos OS versions prior to 22.3R2-S2, 22.3R3 Juniper Networks...

PT-2023-6301 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 21.4R3-S5-EVO Juniper Networks Junos OS Evolved 22.1 versions prior to 22.1R3-S4-EVO Juniper Networks Junos OS Evolved 22.2 versions 22.2R1-EVO and later Juniper Networks Junos OS Evolved 22...

Juniper Networks Junos OS Evolved Access Control Error Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to bypass MAC address checking, allowing MAC addresses that are not intended to reach neighbori...

PT-2023-6309 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S8-EVO Juniper Networks Junos OS Evolved version 21.1R1-EVO and later Juniper Networks Junos OS Evolved versions prior to 21.2R3-S6-EVO Juniper Networks Junos OS Evolved version...

Juniper Networks Junos OS Evolved Information Disclosure Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to view passwords provided on the CLI command line...

CVE-2023-44187: Exposure of Sensitive Information to an Unauthorized Actor

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

Juniper Networks Junos OS Evolved Access Control Error Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to bypass MAC address checking, allowing MAC addresses that are not intended to reach neighbori...

Juniper Networks Junos OS and Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

CVE-2023-44186: Improper Handling of Exceptional Conditions

An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service DoS. Continued receipt and...

PT-2023-6243 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 20.4R3-S7-EVO Junos OS Evolved version 21.1R1-EVO and later Junos OS Evolved versions prior to 21.2R3-S5-EVO Junos OS Evolved versions prior to 21.3R3-S4-EVO Junos OS Evolved versions prior to 21.4R3-S4-EVO...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to intercept VNF Virtual Network Functions communications, thereby exposing sensitive information...

PT-2023-6228 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved on PTX10003 Series versions prior to 21.4R3-S4-EVO Juniper Networks Junos OS Evolved on PTX10003 Series version 22.1 versions prior to 22.1R3-S3-EVO Juniper Networks Junos OS Evolved on PTX10003 Series versio...