CVE-2023-44187

Summary

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system.

This issue affects Juniper Networks Junos OS Evolved:

  • All versions prior to 20.4R3-S7-EVO;
  • 21.1 versions 21.1R1-EVO and later;
  • 21.2 versions prior to 21.2R3-S5-EVO;
  • 21.3 versions prior to 21.3R3-S4-EVO;
  • 21.4 versions prior to 21.4R3-S4-EVO;
  • 22.1 versions prior to 22.1R3-S2-EVO;
  • 22.2 versions prior to 22.2R2-EVO.

Affected Software

VendorProductVersion RangeStatus
Juniper NetworksJunos OS Evolved0 < 20.4R3-S7-EVOaffected
Juniper NetworksJunos OS Evolved21.1R1 < 21.1*affected
Juniper NetworksJunos OS Evolved21.2 < 21.2R3-S5-EVOaffected
Juniper NetworksJunos OS Evolved21.3 < 21.3R3-S4-EVOaffected
Juniper NetworksJunos OS Evolved21.4 < 21.4R3-S4-EVOaffected
Juniper NetworksJunos OS Evolved22.1 < 22.1R3-S2-EVOaffected
Juniper NetworksJunos OS Evolved22.2 < 22.2R2-EVOaffected

Weaknesses

  • CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Workarounds

Restrict Junos OS Evolved shell access to trusted users only.

Avoid or disallow the use of the 'file copy' command.

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References