Refine your search
13 vulnerabilities found for Session Smart Conductor by Juniper Networks
CVE-2026-106079 (GCVE-0-2026-106079)
Vulnerability from cvelistv5
Published
2026-10-28 16:37
Modified
2026-10-28 16:37
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003eAn Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027) vulnerability\u0026nbsp;in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.\u003c/div\u003e"
}
],
"value": "An Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027) vulnerability\u00a0in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:37:49.668Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65021"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-106079",
"datePublished": "2026-10-28T16:37:49.668Z",
"dateReserved": "2026-10-06T15:00:41.622Z",
"dateUpdated": "2026-10-28T16:37:49.668Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103407 (GCVE-0-2026-103407)
Vulnerability from cvelistv5
Published
2026-10-28 16:36
Modified
2026-10-28 16:36
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary
An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the certificate and private-key REST API.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the certificate and private-key REST API."
}
],
"value": "An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the certificate and private-key REST API."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:36:19.559Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65210"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103407",
"datePublished": "2026-10-28T16:36:19.559Z",
"dateReserved": "2026-09-30T14:33:03.168Z",
"dateUpdated": "2026-10-28T16:36:19.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103406 (GCVE-0-2026-103406)
Vulnerability from cvelistv5
Published
2026-10-28 16:35
Modified
2026-10-28 16:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary
An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Juniper Networks | Session Smart Conductor |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID."
}
],
"value": "An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:35:53.323Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "The following software releases of Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65205"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No available workarounds exist for this issue."
}
],
"value": "No available workarounds exist for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103406",
"datePublished": "2026-10-28T16:35:53.323Z",
"dateReserved": "2026-09-30T14:33:03.168Z",
"dateUpdated": "2026-10-28T16:35:53.323Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103405 (GCVE-0-2026-103405)
Vulnerability from cvelistv5
Published
2026-10-28 16:35
Modified
2026-10-28 16:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary
An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027) vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor\u0026nbsp;allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters."
}
],
"value": "An Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027) vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor\u00a0allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:35:39.369Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65039"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103405",
"datePublished": "2026-10-28T16:35:39.369Z",
"dateReserved": "2026-09-30T14:33:03.168Z",
"dateUpdated": "2026-10-28T16:35:39.369Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103404 (GCVE-0-2026-103404)
Vulnerability from cvelistv5
Published
2026-10-28 16:35
Modified
2026-10-28 16:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-732 - Incorrect Permission Assignment for Critical Resource
Summary
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Juniper Networks | Session Smart Conductor |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks\u0026nbsp;Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory."
}
],
"value": "An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks\u00a0Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:35:25.296Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65034"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103404",
"datePublished": "2026-10-28T16:35:25.296Z",
"dateReserved": "2026-09-30T14:33:03.168Z",
"dateUpdated": "2026-10-28T16:35:25.296Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103403 (GCVE-0-2026-103403)
Vulnerability from cvelistv5
Published
2026-10-28 16:35
Modified
2026-10-28 16:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perform arbitrary file deletion and arbitrary command execution via the deletion of an audit rule.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027) vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor\u0026nbsp;allows an attacker to perform arbitrary file deletion and arbitrary command execution via the deletion of an audit rule."
}
],
"value": "An Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027) vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor\u00a0allows an attacker to perform arbitrary file deletion and arbitrary command execution via the deletion of an audit rule."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:35:11.327Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Router and Session Smart Conductor\u0026nbsp;have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Router and Session Smart Conductor\u00a0have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65030"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103403",
"datePublished": "2026-10-28T16:35:11.327Z",
"dateReserved": "2026-09-30T14:33:03.168Z",
"dateUpdated": "2026-10-28T16:35:11.327Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103402 (GCVE-0-2026-103402)
Vulnerability from cvelistv5
Published
2026-10-28 16:34
Modified
2026-10-28 16:34
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-345 - Insufficient Verification of Data Authenticity
Summary
An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks\u0026nbsp;Session Smart Router and Session Smart Conductor\u0026nbsp;allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files."
}
],
"value": "An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks\u00a0Session Smart Router and Session Smart Conductor\u00a0allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345 Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:34:58.448Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65026"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103402",
"datePublished": "2026-10-28T16:34:58.448Z",
"dateReserved": "2026-09-30T14:33:03.168Z",
"dateUpdated": "2026-10-28T16:34:58.448Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103401 (GCVE-0-2026-103401)
Vulnerability from cvelistv5
Published
2026-10-28 16:34
Modified
2026-10-28 16:34
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Summary
An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.
This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Improper Link Resolution Before File Access (\u0027Link Following\u0027) vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor\u0026nbsp;allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.\u003cbr\u003e\u003cbr\u003eThis vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.\u003cbr\u003e"
}
],
"value": "An Improper Link Resolution Before File Access (\u0027Link Following\u0027) vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor\u00a0allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.\n\nThis vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:34:44.566Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65017"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103401",
"datePublished": "2026-10-28T16:34:44.566Z",
"dateReserved": "2026-09-30T14:33:03.168Z",
"dateUpdated": "2026-10-28T16:34:44.566Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103400 (GCVE-0-2026-103400)
Vulnerability from cvelistv5
Published
2026-10-28 16:34
Modified
2026-10-29 01:52
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary
An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of service via the creation of specially named directories and a service restart.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-103400",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-29T01:37:46.030388Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T01:52:03.696Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027) vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor\u0026nbsp;allows an attacker with local access to unmount arbitrary filesystems or cause a denial of service via the creation of specially named directories and a service restart."
}
],
"value": "An Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027) vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor\u00a0allows an attacker with local access to unmount arbitrary filesystems or cause a denial of service via the creation of specially named directories and a service restart."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:34:29.792Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"EM-1071"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103400",
"datePublished": "2026-10-28T16:34:29.792Z",
"dateReserved": "2026-09-30T14:33:03.168Z",
"dateUpdated": "2026-10-29T01:52:03.696Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103390 (GCVE-0-2026-103390)
Vulnerability from cvelistv5
Published
2026-10-28 16:33
Modified
2026-10-29 01:52
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 < 7.0.5 Version: 7.1.0 < 7.1.7 Version: 7.2.0 < 7.2.3 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-103390",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-29T01:37:59.693207Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T01:52:04.374Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "7.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "7.1.7",
"status": "affected",
"version": "7.1.0",
"versionType": "custom"
},
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-10-28T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request."
}
],
"value": "An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:33:16.471Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA112183"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\u003cbr\u003e\u003cul\u003e\u003cli\u003e7.0.5 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.1.7 \n\nand all subsequent releases;\u003c/li\u003e\u003cli\u003e7.2.3 and all subsequent releases.\u003c/li\u003e\u003c/ul\u003e\n\n\u003cbr\u003e"
}
],
"value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."
}
],
"source": {
"advisory": "JSA112183",
"defect": [
"I95-65236"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2026-103390",
"datePublished": "2026-10-28T16:33:16.471Z",
"dateReserved": "2026-09-30T14:27:56.628Z",
"dateUpdated": "2026-10-29T01:52:04.374Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-21589 (GCVE-0-2025-21589)
Vulnerability from cvelistv5
Published
2026-01-27 20:32
Modified
2026-01-27 21:28
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
VLAI Severity ?
EPSS score ?
CWE
- CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Summary
An Authentication Bypass Using an
Alternate Path or Channel vulnerability in Juniper Networks Session Smart
Router may allows a network-based attacker to bypass authentication
and take administrative control of the device.
This issue affects Session Smart Router:
* from 5.6.7 before 5.6.17,
* from 6.0 before 6.0.8 (affected from 6.0.8),
* from 6.1 before 6.1.12-lts,
* from 6.2 before 6.2.8-lts,
* from 6.3 before 6.3.3-r2;
This issue affects Session Smart Conductor:
* from 5.6.7 before 5.6.17,
* from 6.0 before 6.0.8 (affected from 6.0.8),
* from 6.1 before 6.1.12-lts,
* from 6.2 before 6.2.8-lts,
* from 6.3 before 6.3.3-r2;
This issue affects WAN Assurance Managed Routers:
* from 5.6.7 before 5.6.17,
* from 6.0 before 6.0.8 (affected from 6.0.8),
* from 6.1 before 6.1.12-lts,
* from 6.2 before 6.2.8-lts,
* from 6.3 before 6.3.3-r2.
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 5.6.7 ≤ Version: 6.1 ≤ Version: 6.2 ≤ Version: 6.3 ≤ |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-21589",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-27T21:27:50.309259Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-27T21:28:02.560Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "5.6.17",
"status": "affected",
"version": "5.6.7",
"versionType": "semver"
},
{
"changes": [
{
"at": "6.0.8",
"status": "affected"
}
],
"lessThan": "6.0.8",
"status": "unaffected",
"version": "6.0",
"versionType": "semver"
},
{
"lessThan": "6.1.12-lts",
"status": "affected",
"version": "6.1",
"versionType": "semver"
},
{
"lessThan": "6.2.8-lts",
"status": "affected",
"version": "6.2",
"versionType": "semver"
},
{
"lessThan": "6.3.3-r2",
"status": "affected",
"version": "6.3",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "5.6.17",
"status": "affected",
"version": "5.6.7",
"versionType": "semver"
},
{
"changes": [
{
"at": "6.0.8",
"status": "affected"
}
],
"lessThan": "6.0.8",
"status": "unaffected",
"version": "6.0",
"versionType": "semver"
},
{
"lessThan": "6.1.12-lts",
"status": "affected",
"version": "6.1",
"versionType": "semver"
},
{
"lessThan": "6.2.8-lts",
"status": "affected",
"version": "6.2",
"versionType": "semver"
},
{
"lessThan": "6.3.3-r2",
"status": "affected",
"version": "6.3",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "WAN Assurance Managed Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "5.6.17",
"status": "affected",
"version": "5.6.7",
"versionType": "semver"
},
{
"changes": [
{
"at": "6.0.8",
"status": "affected"
}
],
"lessThan": "6.0.8",
"status": "unaffected",
"version": "6.0",
"versionType": "semver"
},
{
"lessThan": "6.1.12-lts",
"status": "affected",
"version": "6.1",
"versionType": "semver"
},
{
"lessThan": "6.2.8-lts",
"status": "affected",
"version": "6.2",
"versionType": "semver"
},
{
"lessThan": "6.3.3-r2",
"status": "affected",
"version": "6.3",
"versionType": "semver"
}
]
}
],
"datePublic": "2025-02-04T17:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn Authentication Bypass Using an\nAlternate Path or Channel vulnerability in Juniper Networks Session Smart\nRouter may allows a network-based attacker to bypass authentication\nand take administrative control of the device.\u003c/p\u003e\u003cp\u003eThis issue affects Session Smart Router:\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003efrom 5.6.7 before 5.6.17,\u0026nbsp;\u003c/li\u003e\u003cli\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003efrom 6.0 before 6.0.8 (affected from 6.0.8),\u003c/span\u003e\u003cbr\u003e\u003c/li\u003e\u003cli\u003efrom 6.1 before 6.1.12-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.8-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.3 before 6.3.3-r2;\u0026nbsp;\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eThis issue affects Session Smart Conductor:\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003efrom 5.6.7 before 5.6.17,\u0026nbsp;\u003c/li\u003e\u003cli\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003efrom 6.0 before 6.0.8 (affected from 6.0.8),\u003c/span\u003e\u003cbr\u003e\u003c/li\u003e\u003cli\u003efrom 6.1 before 6.1.12-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.8-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.3 before 6.3.3-r2;\u0026nbsp;\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eThis issue affects WAN Assurance Managed Routers:\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003efrom 5.6.7 before 5.6.17,\u0026nbsp;\u003c/li\u003e\u003cli\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003efrom 6.0 before 6.0.8 (affected from 6.0.8),\u003c/span\u003e\u003cbr\u003e\u003c/li\u003e\u003cli\u003efrom 6.1 before 6.1.12-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.8-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.3 before 6.3.3-r2.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e"
}
],
"value": "An Authentication Bypass Using an\nAlternate Path or Channel vulnerability in Juniper Networks Session Smart\nRouter may allows a network-based attacker to bypass authentication\nand take administrative control of the device.\n\nThis issue affects Session Smart Router:\u00a0\n\n\n\n * from 5.6.7 before 5.6.17,\u00a0\n * from 6.0 before 6.0.8 (affected from 6.0.8),\n\n * from 6.1 before 6.1.12-lts,\u00a0\n * from 6.2 before 6.2.8-lts,\u00a0\n * from 6.3 before 6.3.3-r2;\u00a0\n\n\n\n\nThis issue affects Session Smart Conductor:\u00a0\n\n\n\n * from 5.6.7 before 5.6.17,\u00a0\n * from 6.0 before 6.0.8 (affected from 6.0.8),\n\n * from 6.1 before 6.1.12-lts,\u00a0\n * from 6.2 before 6.2.8-lts,\u00a0\n * from 6.3 before 6.3.3-r2;\u00a0\n\n\n\n\nThis issue affects WAN Assurance Managed Routers:\u00a0\n\n\n\n * from 5.6.7 before 5.6.17,\u00a0\n * from 6.0 before 6.0.8 (affected from 6.0.8),\n\n * from 6.1 before 6.1.12-lts,\u00a0\n * from 6.2 before 6.2.8-lts,\u00a0\n * from 6.3 before 6.3.3-r2."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-27T20:32:13.334Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/"
},
{
"tags": [
"related"
],
"url": "https://support.juniper.net/support/eol/software/ssr/"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://kb.juniper.net/JSA94663"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe following software releases have\nbeen updated to resolve this issue:\u003c/p\u003e\n\n\u003cp\u003e\u003cbr\u003e\n\u003cb\u003eSession Smart Router:\u003c/b\u003e\u0026nbsp;SSR-5.6.17, SSR-6.1.12-lts, SSR-6.2.8-lts,\nSSR-6.3.3-r2 and subsequent releases. \u003c/p\u003e\n\n\u003cp\u003e\u003cbr\u003e\nIt is suggested to upgrade all affected systems to one of these versions of\nsoftware. In a Conductor-managed deployment, it is sufficient to upgrade only the\nConductor nodes and the fix will be applied automatically to all connected\nrouters. As practical, the routers should still be upgraded to a fixed version\nhowever they will not be vulnerable once they connect to an upgraded Conductor.\u0026nbsp;Router patching can be confirmed once the router reaches the \u201crunning\" (on 6.2 and earlier) or \u201csynchronized\u201d (on 6.3+) state on the Conductor\".\u003cbr\u003e\n\u0026nbsp;\u003c/p\u003e\n\n\u003cp\u003eThis vulnerability has been patched\nautomatically on devices that operate with WAN Assurance (where configuration is also managed) connected\nto the Mist Cloud. As practical, the routers should still be upgraded to a version\ncontaining the fix.\u003cbr\u003e\n\u003cbr\u003e\nIt is important to note that when the fix is applied automatically on routers managed\nby a Conductor or on WAN assurance, it will have no impact on data-plane\nfunctions of the router. The application of the fix is non-disruptive to\nproduction traffic. There may be a momentary downtime (less than 30 seconds) to\nthe web-based management and APIs.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "The following software releases have\nbeen updated to resolve this issue:\n\n\n\n\n\nSession Smart Router:\u00a0SSR-5.6.17, SSR-6.1.12-lts, SSR-6.2.8-lts,\nSSR-6.3.3-r2 and subsequent releases. \n\n\n\n\n\nIt is suggested to upgrade all affected systems to one of these versions of\nsoftware. In a Conductor-managed deployment, it is sufficient to upgrade only the\nConductor nodes and the fix will be applied automatically to all connected\nrouters. As practical, the routers should still be upgraded to a fixed version\nhowever they will not be vulnerable once they connect to an upgraded Conductor.\u00a0Router patching can be confirmed once the router reaches the \u201crunning\" (on 6.2 and earlier) or \u201csynchronized\u201d (on 6.3+) state on the Conductor\".\n\n\u00a0\n\n\n\nThis vulnerability has been patched\nautomatically on devices that operate with WAN Assurance (where configuration is also managed) connected\nto the Mist Cloud. As practical, the routers should still be upgraded to a version\ncontaining the fix.\n\n\n\nIt is important to note that when the fix is applied automatically on routers managed\nby a Conductor or on WAN assurance, it will have no impact on data-plane\nfunctions of the router. The application of the fix is non-disruptive to\nproduction traffic. There may be a momentary downtime (less than 30 seconds) to\nthe web-based management and APIs."
}
],
"source": {
"advisory": "JSA94663",
"defect": [
"I95-59677"
],
"discovery": "INTERNAL"
},
"title": "Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There are no known workarounds for this issue."
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2025-21589",
"datePublished": "2026-01-27T20:32:13.334Z",
"dateReserved": "2024-12-26T14:47:11.667Z",
"dateUpdated": "2026-01-27T21:28:02.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-2973 (GCVE-0-2024-2973)
Vulnerability from cvelistv5
Published
2024-06-27 20:17
Modified
2024-08-01 19:32
Severity ?
10.0 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10.0 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/V:C/RE:M/U:Red
10.0 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/V:C/RE:M/U:Red
VLAI Severity ?
EPSS score ?
CWE
- CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Summary
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.
Only routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.
No other Juniper Networks products or platforms are affected by this issue.
This issue affects:
Session Smart Router:
* All versions before 5.6.15,
* from 6.0 before 6.1.9-lts,
* from 6.2 before 6.2.5-sts.
Session Smart Conductor:
* All versions before 5.6.15,
* from 6.0 before 6.1.9-lts,
* from 6.2 before 6.2.5-sts.
WAN Assurance Router:
* 6.0 versions before 6.1.9-lts,
* 6.2 versions before 6.2.5-sts.
References
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Session Smart Router |
Version: 0 ≤ Version: 6.0 ≤ Version: 6.2 ≤ |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:h:juniper:session_smart_conductor:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "session_smart_conductor",
"vendor": "juniper",
"versions": [
{
"lessThan": "5.6.15",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "6.1.9-lts",
"status": "affected",
"version": "6.0",
"versionType": "custom"
},
{
"lessThan": "6.2.5-sts",
"status": "affected",
"version": "6.2",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:juniper:wan_assurance_router:6.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "wan_assurance_router",
"vendor": "juniper",
"versions": [
{
"lessThan": "6.1.9-lts",
"status": "affected",
"version": "6.0",
"versionType": "custom"
},
{
"lessThan": "6.2.5-sts",
"status": "affected",
"version": "6.2",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:juniper:session_smart_router:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "session_smart_router",
"vendor": "juniper",
"versions": [
{
"lessThan": "5.6.15",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "6.1.9-lts",
"status": "affected",
"version": "6.0",
"versionType": "custom"
},
{
"lessThan": "6.2.5-sts",
"status": "affected",
"version": "6.2",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-2973",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-01T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-02T03:55:38.720Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T19:32:42.563Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://supportportal.juniper.net/JSA83126"
},
{
"tags": [
"related",
"x_transferred"
],
"url": "https://support.juniper.net/support/eol/software/ssr/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Session Smart Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "5.6.15",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.1.9-lts",
"status": "affected",
"version": "6.0",
"versionType": "semver"
},
{
"lessThan": "6.2.5-sts",
"status": "affected",
"version": "6.2",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Session Smart Conductor",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "5.6.15",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.1.9-lts",
"status": "affected",
"version": "6.0",
"versionType": "semver"
},
{
"lessThan": "6.2.5-sts",
"status": "affected",
"version": "6.2",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "WAN Assurance Router",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "6.1.9-lts",
"status": "affected",
"version": "6.0",
"versionType": "semver"
},
{
"lessThan": "6.2.5-sts",
"status": "affected",
"version": "6.2",
"versionType": "semver"
}
]
}
],
"datePublic": "2024-06-27T19:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\u003cbr\u003e\u003cp\u003e\u003cb\u003eOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\u003c/b\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eNo other Juniper Networks products or platforms are affected by this issue.\u003cbr\u003e\u003c/p\u003e\u003cp\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003eThis issue affects:\u003c/p\u003e\u003cp\u003eSession Smart Router:\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions before 5.6.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.0 before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.5-sts.\u003c/li\u003e\u003c/ul\u003e\u003cbr\u003eSession Smart Conductor:\u0026nbsp;\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions before 5.6.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.0 before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003efrom 6.2 before 6.2.5-sts.\u0026nbsp;\u003c/li\u003e\u003c/ul\u003e\u003cbr\u003eWAN Assurance Router:\u0026nbsp;\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e6.0 versions before 6.1.9-lts,\u0026nbsp;\u003c/li\u003e\u003cli\u003e6.2 versions before 6.2.5-sts.\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.\nOnly routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.\n\n\n\n\nNo other Juniper Networks products or platforms are affected by this issue.\n\n\n\n\n\nThis issue affects:\n\nSession Smart Router:\u00a0\n\n\n\n * All versions before 5.6.15,\u00a0\n * from 6.0 before 6.1.9-lts,\u00a0\n * from 6.2 before 6.2.5-sts.\n\n\n\nSession Smart Conductor:\u00a0\n\n\n\n * All versions before 5.6.15,\u00a0\n * from 6.0 before 6.1.9-lts,\u00a0\n * from 6.2 before 6.2.5-sts.\u00a0\n\n\n\nWAN Assurance Router:\u00a0\n\n\n\n * 6.0 versions before 6.1.9-lts,\u00a0\n * 6.2 versions before 6.2.5-sts."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"providerUrgency": "RED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/V:C/RE:M/U:Red",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-27T20:25:06.777Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA83126"
},
{
"tags": [
"related"
],
"url": "https://support.juniper.net/support/eol/software/ssr/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe following software releases have been updated to resolve this issue:\u003c/p\u003e\u003cp\u003e\u003cbr\u003e\u003cstrong\u003eSession Smart Router:\u003c/strong\u003e SSR-5.6.15, SSR-6.1.9-lts, SSR-6.2.5-sts, and subsequent releases. \u003c/p\u003e\u003cp\u003e\u003cbr\u003eIt is suggested to upgrade all affected systems to these versions of software. In a Conductor-managed deployment, it is sufficient to upgrade the Conductor nodes only and the fix will be applied automatically to all connected routers. As practical, the routers should still be upgraded to a fixed version however they will not be vulnerable once they connect to an upgraded Conductor.\u003c/p\u003e\u003cp\u003e\u003cbr\u003eThis vulnerability has been patched automatically on affected devices for WAN Assurance routers connected to the Mist Cloud. For systems that are provisioned in a High-Availability cluster, these should be upgraded to a patched version as soon as practical (SSR-6.1.9 or SSR-6.2.5).\u003c/p\u003e\u003cp\u003e\u003cbr\u003eIt is important to note that the fix is applied automatically on managed routers by a Conductor or on WAN assurance routers has no impact on data-plane functions of the router. The application of the fix is non-disruptive to production traffic. There may be a momentary downtime (less than 30 seconds) to the web-based management and APIs however this will resolve quickly.\u003c/p\u003e"
}
],
"value": "The following software releases have been updated to resolve this issue:\n\n\nSession Smart Router: SSR-5.6.15, SSR-6.1.9-lts, SSR-6.2.5-sts, and subsequent releases. \n\n\nIt is suggested to upgrade all affected systems to these versions of software. In a Conductor-managed deployment, it is sufficient to upgrade the Conductor nodes only and the fix will be applied automatically to all connected routers. As practical, the routers should still be upgraded to a fixed version however they will not be vulnerable once they connect to an upgraded Conductor.\n\n\nThis vulnerability has been patched automatically on affected devices for WAN Assurance routers connected to the Mist Cloud. For systems that are provisioned in a High-Availability cluster, these should be upgraded to a patched version as soon as practical (SSR-6.1.9 or SSR-6.2.5).\n\n\nIt is important to note that the fix is applied automatically on managed routers by a Conductor or on WAN assurance routers has no impact on data-plane functions of the router. The application of the fix is non-disruptive to production traffic. There may be a momentary downtime (less than 30 seconds) to the web-based management and APIs however this will resolve quickly."
}
],
"source": {
"advisory": "JSA83126",
"defect": [
"I95-56931"
],
"discovery": "INTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2024-06-27T19:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThere are no known workarounds for this issue.\u003c/p\u003e"
}
],
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2024-2973",
"datePublished": "2024-06-27T20:17:50.239Z",
"dateReserved": "2024-03-26T23:06:22.816Z",
"dateUpdated": "2024-08-01T19:32:42.563Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CERTFR-2025-AVI-0126
Vulnerability from certfr_avis
Une vulnérabilité a été découverte dans les produits Juniper Networks. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Juniper Networks | Session Smart Conductor | Session Smart Conductor versions 6.2.x antérieures à 6.2.8-lts | ||
| Juniper Networks | Session Smart Router | Session Smart Router versions 6.3.x antérieures à 6.3.3-r2 | ||
| Juniper Networks | WAN Assurance Managed Routers | WAN Assurance Managed Routers versions 6.2.x antérieures à 6.2.8-lts | ||
| Juniper Networks | Session Smart Router | Session Smart Router versions 6.x antérieures à 6.1.12-lts | ||
| Juniper Networks | WAN Assurance Managed Routers | WAN Assurance Managed Routers versions 6.x antérieures à 6.1.12-lts | ||
| Juniper Networks | Session Smart Router | Session Smart Router versions 5.6.x antérieures à 5.6.17 | ||
| Juniper Networks | Session Smart Conductor | Session Smart Conductor versions 5.6.x antérieures à 5.6.17 | ||
| Juniper Networks | Session Smart Conductor | Session Smart Conductor versions 6.x antérieures à 6.1.12-lts | ||
| Juniper Networks | Session Smart Conductor | Session Smart Conductor versions 6.3.x antérieures à 6.3.3-r2 | ||
| Juniper Networks | WAN Assurance Managed Routers | WAN Assurance Managed Routers versions 6.3.x antérieures à 6.3.3-r2 | ||
| Juniper Networks | WAN Assurance Managed Routers | WAN Assurance Managed Routers versions 5.6.x antérieures à 5.6.17 | ||
| Juniper Networks | Session Smart Router | Session Smart Router versions 6.2.x antérieures à 6.2.8-lts |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Session Smart Conductor versions 6.2.x ant\u00e9rieures \u00e0 6.2.8-lts",
"product": {
"name": "Session Smart Conductor",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Session Smart Router versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-r2",
"product": {
"name": "Session Smart Router",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "WAN Assurance Managed Routers versions 6.2.x ant\u00e9rieures \u00e0 6.2.8-lts",
"product": {
"name": "WAN Assurance Managed Routers",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Session Smart Router versions 6.x ant\u00e9rieures \u00e0 6.1.12-lts",
"product": {
"name": "Session Smart Router",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "WAN Assurance Managed Routers versions 6.x ant\u00e9rieures \u00e0 6.1.12-lts",
"product": {
"name": "WAN Assurance Managed Routers",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Session Smart Router versions 5.6.x ant\u00e9rieures \u00e0 5.6.17",
"product": {
"name": "Session Smart Router",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Session Smart Conductor versions 5.6.x ant\u00e9rieures \u00e0 5.6.17",
"product": {
"name": "Session Smart Conductor",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Session Smart Conductor versions 6.x ant\u00e9rieures \u00e0 6.1.12-lts",
"product": {
"name": "Session Smart Conductor",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Session Smart Conductor versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-r2",
"product": {
"name": "Session Smart Conductor",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "WAN Assurance Managed Routers versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-r2",
"product": {
"name": "WAN Assurance Managed Routers",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "WAN Assurance Managed Routers versions 5.6.x ant\u00e9rieures \u00e0 5.6.17",
"product": {
"name": "WAN Assurance Managed Routers",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Session Smart Router versions 6.2.x ant\u00e9rieures \u00e0 6.2.8-lts",
"product": {
"name": "Session Smart Router",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-21589",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21589"
}
],
"initial_release_date": "2025-02-12T00:00:00",
"last_revision_date": "2025-02-12T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0126",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-02-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Juniper Networks. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Juniper Networks",
"vendor_advisories": [
{
"published_at": "2025-02-11",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA94663",
"url": "https://supportportal.juniper.net/s/article/2025-02-Out-of-Cycle-Security-Bulletin-Session-Smart-Router-Session-Smart-Conductor-WAN-Assurance-Router-API-Authentication-Bypass-Vulnerability-CVE-2025-21589"
}
]
}