PT-2023-22060 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S7-EVO Juniper Networks Junos OS Evolved version 21.1-EVO versions prior to 21.1R3-S4-EVO Juniper Networks Junos OS Evolved version 21.2-EVO versions prior to 21.2R3-S5-EVO Juniper...

CVE-2023-28973

CVE-2023-28973 is an improper authorization vulnerability in Juniper Networks Junos OS Evolved, exposing the local sysmanctl shell command to authenticated users who can run administrative actions (daemon restart, RE switchover, node shutdown). Affected products/versions include Junos OS Evolved ...

CVE-2023-28980

CVE-2023-28980 affects Juniper Networks Junos OS and Junos OS Evolved. A Use-After-Free in the routing protocol daemon (rpd) can crash the rpd in a BGP rib sharding scenario, allowing a locally authenticated, low-privileged attacker to cause DoS, especially with large routing tables (>1M). Con...

CVE-2023-28983 Junos OS Evolved: Shell Injection vulnerability in the gNOI server

An OS Command Injection vulnerability in gRPC Network Operations Interface gNOI server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4...

Juniper Networks Junos OS Evolved 授权问题漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Juniper Networks Junos OS Evolved suffers from an authorization issue vulnerability that arises from improper authorization in the "sysmanctl" shell command, which could be exploited by an attacker to execute...

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an updated version of Juniper Networks' Junos OS. A security vulnerability in Juniper Networks Junos OS Evolved, which arises from an insecure default resource initialization, can be exploited by an attacker to gain access to certain confidential information a...

CVE-2023-28967: Use of Uninitialized Resource

A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol BGP software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to send specific genuine BGP packets to a device configured with BGP to cause a Denial of Service DoS by...

CVE-2023-28966 Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute commands as root. The issue is caused by improper file and directory permissions on certain system files, allowing an...

PT-2023-3001

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S5-EVO Juniper Networks Junos OS Evolved version 21.2 versions prior to 21.2R3-EVO Juniper Networks Junos OS Evolved version 21.3 versions prior to 21.3R2-EVO Description The issue is...

PT-2023-3072 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions 21.4R1-EVO through 22.1R1-EVO Description: The issue is related to an OS Command Injection vulnerability in the gRPC Network Operations Interface gNOI server module. This allows an authenticated,...

PT-2023-3066 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 21.1R1 through 21.1R3-S5 Juniper Networks Junos OS versions 21.2R1 through 21.2R3-S2 Juniper Networks Junos OS versions 21.3R1 through 21.3R3-S2 Juniper Networks Junos OS versions prior to 21.4R3 Juniper...

PT-2023-2579

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions 20.4 through 20.4R3-S5-EVO Juniper Networks Junos OS Evolved versions 21.2 through 21.2R3-EVO Juniper Networks Junos OS Evolved versions 21.3 through 21.3R3-EVO Juniper Networks Junos OS Evolved...

PT-2023-3000 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S5-EVO Juniper Networks Junos OS Evolved 21.2 versions prior to 21.2R3-EVO Juniper Networks Junos OS Evolved 21.3 versions prior to 21.3R2-EVO Juniper Networks Junos OS Evolved 21.4...

PT-2023-3068 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.3R3-S2 Juniper Networks Junos OS versions prior to 20.4R3-S6 Juniper Networks Junos OS versions prior to 21.1R3 Juniper Networks Junos OS versions prior to 21.2R3 Juniper Networks Junos OS versio...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to...

The vulnerabilities of the closed software environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, the Cisco Prime Infrastructure – systems for monitoring and managing network equipment – allow attackers to escalate their privileges.

The vulnerability of the closed-programming environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, and the Cisco Prime Infrastructure system for network monitoring and management exists due to the lack of measures taken to neutralize special elements used i...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a attacker to perform a CSRF attack and carry out arbitrary actions.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software lies in the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack and...

Cisco Evolved Programmable Network Manager Multiple Vulnerabilities (cisco-sa-pi-epnm-eRPWAXLe)

The version of Cisco Evolved Programmable Network EPN Manager installed on the remote host is prior to 5.0.2.5, 5.1.4.3, 6.0.2.1 or 6.1.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the cisco-sa-pi-epnm-eRPWAXLe advisory: - A cross-site scripting XSS vulnerability i...

CVE-2023-20122

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager EPNM, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating...

CVE-2023-20131

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow a remote attacker to obtain privileged information and conduct cross-site scripting XSS and cross-site request forgery CSRF attacks. For mor...