8.4

CVE-2023-44194

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS allows an unauthenticated attacker with local access to the device to create a backdoor with root privileges. The issue is caused by improper directory permissions on a certain system directory, allowing an attacker with access to this directory to create a backdoor with root privileges.

This issue affects Juniper Networks Junos OS:



  *  All versions prior to 20.4R3-S5;
  *  21.1 versions prior to 21.1R3-S4;
  *  21.2 versions prior to 21.2R3-S4;
  *  21.3 versions prior to 21.3R3-S3;
  *  21.4 versions prior to 21.4R3-S1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version < 20.4
Juniper ≫ Junos Version20.4 Update-
Juniper ≫ Junos Version20.4 Updater1
Juniper ≫ Junos Version20.4 Updater1-s1
Juniper ≫ Junos Version20.4 Updater2
Juniper ≫ Junos Version20.4 Updater2-s1
Juniper ≫ Junos Version20.4 Updater2-s2
Juniper ≫ Junos Version20.4 Updater3
Juniper ≫ Junos Version20.4 Updater3-s1
Juniper ≫ Junos Version20.4 Updater3-s2
Juniper ≫ Junos Version20.4 Updater3-s3
Juniper ≫ Junos Version20.4 Updater3-s4
Juniper ≫ Junos Version21.1 Update-
Juniper ≫ Junos Version21.1 Updater1
Juniper ≫ Junos Version21.1 Updater1-s1
Juniper ≫ Junos Version21.1 Updater2
Juniper ≫ Junos Version21.1 Updater2-s1
Juniper ≫ Junos Version21.1 Updater2-s2
Juniper ≫ Junos Version21.1 Updater3
Juniper ≫ Junos Version21.1 Updater3-s1
Juniper ≫ Junos Version21.1 Updater3-s2
Juniper ≫ Junos Version21.1 Updater3-s3
Juniper ≫ Junos Version21.2 Update-
Juniper ≫ Junos Version21.2 Updater1
Juniper ≫ Junos Version21.2 Updater1-s1
Juniper ≫ Junos Version21.2 Updater1-s2
Juniper ≫ Junos Version21.2 Updater2
Juniper ≫ Junos Version21.2 Updater2-s1
Juniper ≫ Junos Version21.2 Updater2-s2
Juniper ≫ Junos Version21.2 Updater3
Juniper ≫ Junos Version21.2 Updater3-s1
Juniper ≫ Junos Version21.2 Updater3-s2
Juniper ≫ Junos Version21.2 Updater3-s3
Juniper ≫ Junos Version21.3 Update-
Juniper ≫ Junos Version21.3 Updater1
Juniper ≫ Junos Version21.3 Updater1-s1
Juniper ≫ Junos Version21.3 Updater1-s2
Juniper ≫ Junos Version21.3 Updater2
Juniper ≫ Junos Version21.3 Updater2-s1
Juniper ≫ Junos Version21.3 Updater2-s2
Juniper ≫ Junos Version21.3 Updater3
Juniper ≫ Junos Version21.3 Updater3-s1
Juniper ≫ Junos Version21.4 Update-
Juniper ≫ Junos Version21.4 Updater1
Juniper ≫ Junos Version21.4 Updater1-s1
Juniper ≫ Junos Version21.4 Updater1-s2
Juniper ≫ Junos Version21.4 Updater2
Juniper ≫ Junos Version21.4 Updater2-s1
Juniper ≫ Junos Version21.4 Updater2-s2
Juniper ≫ Junos Version21.4 Updater3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.049
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
sirt@juniper.net 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.