What is CVE-2022-22239?

CVE-2022-22239 is a high-severity vulnerability in Juniper Junos_os_evolved, classified under CWE-250. CVSS score: 8.2/10. Published 2022-10-18.

How severe is CVE-2022-22239?

High severity. CVSS v3 base score is 8.2 out of 10.

Privilege escalation in Juniper Junos_os_evolved

CVE-2022-22239

An Execution with Unnecessary Privileges vulnerability in Management Daemon (mgd) of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate their privileges on the device and potentially r…

EPSS: 0.002 (7.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H.

Affected products

Juniper Junos_os_evolved — versions 20.4, 21.1, 21.2
Juniper Networks Junos Os Evolved — versions unspecified, 21.1-EVO, 21.2-EVO

Weakness classification (CWE)

CWE-250
CWE-269 — Improper Privilege Management

References

sirt@juniper.net (Vendor Advisory)

Frequently asked questions

What is CVE-2022-22239?: CVE-2022-22239 is a high-severity vulnerability in Juniper Junos_os_evolved, classified under CWE-250. CVSS score: 8.2/10. Published 2022-10-18.
How severe is CVE-2022-22239?: High severity. CVSS v3 base score is 8.2 out of 10.