CVE-2022-22221

Summary

An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS on SRX Series and EX Series allows a locally authenticated attacker with low privileges to take full control over the device. One aspect of this vulnerability is that the attacker needs to be able to execute any of the "request …" or "show system download …" commands. This issue affects Juniper Networks Junos OS on SRX Series and EX Series: All versions prior to 19.2R1-S9, 19.2R3-S5; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R3-S8; 20.1 versions prior to 20.1R3-S4; 20.2 versions prior to 20.2R3-S4; 20.3 versions prior to 20.3R3-S3; 20.4 versions prior to 20.4R3-S2, 20.4R3-S3; 21.1 versions prior to 21.1R3-S1; 21.2 versions prior to 21.2R2-S2, 21.2R3; 21.3 versions prior to 21.3R2, 21.3R3; 21.4 versions prior to 21.4R1-S1, 21.4R2.

Affected Software

VendorProductVersion RangeStatus
Juniper NetworksJunos OSunspecified < 19.1R3-S9affected
Juniper NetworksJunos OS19.2 < 19.2R1-S9, 19.2R3-S5affected
Juniper NetworksJunos OS19.3 < 19.3R3-S6affected
Juniper NetworksJunos OS19.4 < 19.4R3-S8affected
Juniper NetworksJunos OS20.1 < 20.1R3-S4affected
Juniper NetworksJunos OS20.2 < 20.2R3-S4affected
Juniper NetworksJunos OS20.3 < 20.3R3-S3affected
Juniper NetworksJunos OS20.4 < 20.4R3-S2, 20.4R3-S3affected
Juniper NetworksJunos OS21.1 < 21.1R3-S1affected
Juniper NetworksJunos OS21.2 < 21.2R2-S2, 21.2R3affected
Juniper NetworksJunos OS21.3 < 21.3R2, 21.3R3affected
Juniper NetworksJunos OS21.4 < 21.4R1-S1, 21.4R2affected

Weaknesses

  • 78

Workarounds

A workaround would be to deny users access to the "request system download …" and "show system download …" CLI commands.

ADP Enrichment

CVE Program Container

Additional References

References