6.7

CVE-2024-30406

Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials

A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials.

This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO. 

This issue does not affect releases before 23.1R1-EVO.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Paragon Active Assurance Test Agent Version -
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 23.1 Update -
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 23.1 Update r1
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 23.1 Update r2
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 23.1 Update r3
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 23.2 Update -
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 23.2 Update r1
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 23.2 Update r1-s1
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 23.2 Update r1-s2
   Juniper ≫ Acx5448 Version -
   Juniper ≫ Acx5448-d Version -
   Juniper ≫ Acx5448-m Version -
   Juniper ≫ Acx7020 Version -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx710 Version -
   Juniper ≫ Acx7100 Version -
   Juniper ≫ Acx7300 Version -
   Juniper ≫ Acx7509 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.033
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Juniper 6.7 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Juniper 5.5 1.1 4
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
CWE-313 Cleartext Storage in a File or on Disk

The product stores sensitive information in cleartext in a file, or on disk.

https://supportportal.juniper.net/JSA79104
Vendor Advisory
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Vendor Advisory
https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/services-paa-test-agent.html
Technical Description
https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade-evo/topics/topic-map/paa-test-agent-install.html
Third Party Advisory