CVE-2024-30406

EPSS 0.02%
Veröffentlicht 12.04.2024 15:15:25
Zuletzt bearbeitet 23.01.2026 16:28:25
Quelle sirt@juniper.net
CVE-Watchlists
Login
Unerledigt
Login

A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials.

This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO. 

This issue does not affect releases before 23.1R1-EVO.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

Diese Information steht angemeldeten Benutzern zur Verfügung.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Paragon Active Assurance Test Agent Version-

   Juniper ≫ Acx5448 Version-
   Juniper ≫ Acx5448-d Version-
   Juniper ≫ Acx5448-m Version-
   Juniper ≫ Acx7020 Version-
   Juniper ≫ Acx7024 Version-
   Juniper ≫ Acx7024x Version-
   Juniper ≫ Acx710 Version-
   Juniper ≫ Acx7100 Version-
   Juniper ≫ Acx7300 Version-
   Juniper ≫ Acx7509 Version-

Juniper ≫ Junos Os Evolved Version23.1 Update-

Juniper ≫ Junos Os Evolved Version23.1 Updater1

Juniper ≫ Junos Os Evolved Version23.1 Updater2

Juniper ≫ Junos Os Evolved Version23.1 Updater3

Juniper ≫ Junos Os Evolved Version23.2 Update-

Juniper ≫ Junos Os Evolved Version23.2 Updater1

Juniper ≫ Junos Os Evolved Version23.2 Updater1-s1

Juniper ≫ Junos Os Evolved Version23.2 Updater1-s2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.047

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
sirt@juniper.net	6.7	0	0	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
sirt@juniper.net	5.5	1.1	4	CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

CWE-313 Cleartext Storage in a File or on Disk

The product stores sensitive information in cleartext in a file, or on disk.

https://supportportal.juniper.net/JSA79104

Vendor Advisory

https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Vendor Advisory

https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/services-paa-test-agent.html

Technical Description

https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade-evo/topics/topic-map/paa-test-agent-install.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-30406

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-30406

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-30406

EUVD