CVE-2024-31887 – IBM Security Verify Privilege Vulnerability
April 17, 2024New Steganography Attack ‘SteganoAmor’ Targets 320 Organizations Globally – Active IOCs
April 17, 2024CVE-2024-31887 – IBM Security Verify Privilege Vulnerability
April 17, 2024New Steganography Attack ‘SteganoAmor’ Targets 320 Organizations Globally – Active IOCs
April 17, 2024Severity
Medium
Analysis Summary
CVE-2024-30401 CVSS:5.9
Juniper Networks Junos OS is vulnerable to a denial of service, caused by an out-of-bounds read vulnerability in the advanced forwarding management process aftman. By sending a specially crafted reuqest, a remote attacker could exploit this vulnerability to cause a reboot of the FPC.
CVE-2024-21615 CVSS:5
Juniper Networks Junos OS and Junos OS Evolved could allow a local authenticated attacker to obtain sensitive information, caused by an incorrect default permissions vulnerability. By sending a specially crafted request, an attacker could exploit this vulnerability to access confidential information on the system.
CVE-2024-30384 CVSS:5.5
Juniper Networks Junos OS is vulnerable to a denial of service, caused by improper error handling in the Packet Forwarding Engine (PFE). By sending a specially crafted CLI command, a local authenticated attacker could exploit this vulnerability to cause PFE to crash.
CVE-2024-30380 CVSS:6.5
Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by an improper handling of exceptional conditions vulnerability. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.
CVE-2024-30409 CVSS:4.3
Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by improper error handling in the telemetry processing. By sending specially crafted packets, a remote attacker could exploit this vulnerability to cause the forwarding information base telemetry daemon (fibtd) to crash.
CVE-2024-30386 CVSS:5.3
Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by an use-after-free vulnerability. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.
CVE-2024-30388 CVSS:6.5
Juniper Networks Junos OS is vulnerable to a denial of service, caused by improper isolation or compartmentalization flaw in the Packet Forwarding Engine (pfe). By sending specially crafted LACP packets, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVE-2024-30410 CVSS:5.8
Juniper Networks Junos OS could allow a remote attacker to bypass security restrictions, caused by an incorrect behavior order flaw in the routing engine (RE). By sending a specially crafted request, an attacker could exploit this vulnerability to bypass traffic blocking when discard term is set.
CVE-2024-30391 CVSS:4.8
Juniper Networks Junos OS and Junos OS Evolved could allow a remote attacker to bypass security restrictions, caused by a missing authentication for critical function vulnerability in the Packet Forwarding Engine (pfe). By sending a specially crafted request, an attacker could exploit this vulnerability to cause limited impact to the integrity or availability of the device.
CVE-2024-21609 CVSS:6.5
Juniper Networks Junos OS is vulnerable to a denial of service, caused by a missing release of memory after effective lifetime vulnerability in the IKE daemon (iked). By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.
CVE-2024-30402 CVSS:5.9
Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by improper error handling in the Layer 2 Address Learning Daemon (l2ald). By sending specially crafted telemetry messages, a remote attacker could exploit this vulnerability to cause l2ald to crash.
CVE-2024-21590 CVSS:6.5
Juniper Networks Junos OS Evolved is vulnerable to a denial of service, caused by improper input validation in the Juniper Tunnel Driver (jtd) and ICMP module. By sending specially crafted packets, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVE-2024-30378 CVSS:5.5
Juniper Networks Junos OS Evolved is vulnerable to a denial of service, caused by a use-after-free flaw in command processing. By sending specially crafted CLI commands, a local authenticated attacker could exploit this vulnerability to cause the bbe-smgd process to crash.
CVE-2024-30406 CVSS:5.5
Juniper Networks Junos OS Evolved could allow a local authenticated attacker to obtain sensitive information, caused by a flaw in the Paragon Active Assurance Test Agent software. By sending a specially crafted request, an attacker could exploit this vulnerability to recover other administrators credentials, and use this information to launch further attacks against the affected system.
Impact
- Denial of Service
- Information Disclosure
- Security Bypass
Indicators of Compromise
CVE
- CVE-2024-30401
- CVE-2024-21615
- CVE-2024-30384
- CVE-2024-30380
- CVE-2024-30409
- CVE-2024-30386
- CVE-2024-30388
- CVE-2024-30410
- CVE-2024-30391
- CVE-2024-21609
- CVE-2024-30402
- CVE-2024-21590
- CVE-2024-30378
- CVE-2024-30406
Affected Vendors
Affected Products
- Juniper Networks Junos OS 20.4
- Juniper Networks Junos OS Evolved
- Juniper Networks Junos OS 21.2
- Juniper Networks Junos OS 21.4
- Juniper Networks Junos OS 22.1
- Juniper Networks Junos OS 22.3
- Juniper Networks Junos OS 22.2
- Juniper Networks Junos OS Evolved 22.1-EVO
- Juniper Networks Junos OS Evolved 22.2-EVO
- Juniper Networks Junos OS 22.4
- Juniper Networks Junos OS Evolved 22.4-EVO
- Juniper Networks Junos OS Evolved 22.3-EVO
- Juniper Networks Junos OS Evolved 23.2-EVO
- Juniper Networks Junos OS Evolved 23.1R1-EVO
Remediation
Refer to Juniper Networks Security Advisory for patch, upgrade or suggested workaround information.