CVE-2024-21591

Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS), or Remote Code Execution (RCE) and obtain root privileges on the device.

This issue is caused by use of an insecure function allowing an attacker to overwrite arbitrary memory.

This issue affects Juniper Networks Junos OS SRX Series and EX Series:

* Junos OS versions earlier than 20.4R3-S9;
* Junos OS 21.2 versions earlier than 21.2R3-S7;
* Junos OS 21.3 versions earlier than 21.3R3-S5;
* Junos OS 21.4 versions earlier than 21.4R3-S5;
* Junos OS 22.1 versions earlier than 22.1R3-S4;
* Junos OS 22.2 versions earlier than 22.2R3-S3;
* Junos OS 22.3 versions earlier than 22.3R3-S2;
* Junos OS 22.4 versions earlier than 22.4R2-S2, 22.4R3.

Una vulnerabilidad de escritura fuera de los límites en J-Web de Juniper Networks Junos OS en las series SRX y EX permite que un atacante basado en red no autenticado provoque una denegación de servicio (DoS) o una ejecución remota de código (RCE) y obtenga privilegios de root en el dispositivo. Este problema se debe al uso de una función insegura que permite a un atacante sobrescribir la memoria arbitraria. Este problema afecta a las series Junos OS SRX y EX de Juniper Networks: * Versiones de Junos OS anteriores a 20.4R3-S9; * Versiones de Junos OS 21.2 anteriores a 21.2R3-S7; * Versiones de Junos OS 21.3 anteriores a 21.3R3-S5; * Versiones de Junos OS 21.4 anteriores a 21.4R3-S5; * Versiones de Junos OS 22.1 anteriores a 22.1R3-S4; * Versiones de Junos OS 22.2 anteriores a 22.2R3-S3; * Versiones de Junos OS 22.3 anteriores a 22.3R3-S2; * Versiones de Junos OS 22.4 anteriores a 22.4R2-S2, 22.4R3.

*Credits: The Juniper SIRT would like to would like to acknowledge and thank Marco Lux of Curesec for responsibly reporting this vulnerability

CVSS Scores

NISTv3.1 9.8

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-12-27 CVE Reserved
2024-01-12 CVE Published
2024-02-10 EPSS Updated
2024-08-01 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-787: Out-of-bounds Write

CAPEC

References (3)

URL	Tag	Source
https://curesec.com/blog/article/CVE-2024-21591_Juniper_Remote_Code_Exec.html	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://supportportal.juniper.net/JSA75729	2024-02-10
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	2024-02-10

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				< 20.4 Search vendor "Juniper" for product "Junos" and version " < 20.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3-s7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r3-s8		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r3-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r3-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.3 Search vendor "Juniper" for product "Junos" and version "22.3"		r3s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.4 Search vendor "Juniper" for product "Junos" and version "22.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.4 Search vendor "Juniper" for product "Junos" and version "22.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.4 Search vendor "Juniper" for product "Junos" and version "22.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.4 Search vendor "Juniper" for product "Junos" and version "22.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.4 Search vendor "Juniper" for product "Junos" and version "22.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.4 Search vendor "Juniper" for product "Junos" and version "22.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.4 Search vendor "Juniper" for product "Junos" and version "22.4"		r3		Affected